DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

macOS Threat Hunting: Unraveling RustBucket Malware Tactics (JNUC talk)

Date (as written)
September 27 2023
Year
2023
Actors (as written)
Lazarus APT group; BlueNoroff
Actor pages
Lazarus APT groupBlueNoroff
Tags (as written)
macOS; supply chain; 3CX; JumpCloud

Source entries (1)

Jamf Threat Labs

macOS Threat Hunting: Unraveling RustBucket Malware Tactics (JNUC talk) · September 27 2023
In this JNUC presentation, Ferdous Saljooki, Senior Threat Researcher at Jamf Threat Labs, takes a deep dive into malware developed by the Lazarus APT group, and their subgroup, BlueNoroff. This includes analysis of the 3CX and JumpCloud supply chain attacks, RustBucket malware and JokerSpy spyware, among others. [...] The Lazarus advance persistent threat (APT) group is a North Korean state-sponsored group.
https://www.jamf.com/blog/threat-hunting-unraveling-malware-tactics/

Suggest a correction on GitHub