People working in software or DeFi platforms · 20/04/2023
Researchers from ESET discover a new Lazarus campaign considered part of "Operation DreamJob" (AKA Nukesped), targeting Linux users with malware for the first time. [Date Occurred: Since at least March 2023; Date Discovered: During March 2023]
Linux malware strengthens links between Lazarus and the 3CX supply-chain attack · April
Annex 59: List of DPRK Cyberthreat actors’ malicious activities monitored by the Panel in 2023 (row 15 of 75, PDF p. 321). DPRK cyber actor: Lazarus Group; Report Name: Linux malware strengthens links between Lazarus and the 3CX supply-chain attack; Case Summary: The Lazarus Group created a Linux payload with a bank-themed PDF lure.; Publication Month: April
Linux malware strengthens links between Lazarus and the 3CX supply-chain attack · 2023/04/20
Similarities with newly discovered Linux malware used in Operation DreamJob corroborate the theory that the 3CX attack was carried out by Lazarus.