Stealthy Attributes of APT Lazarus | Group-IB Blog

Date (as written): 2024-11-13T05:55:12+00:00
Year: 2024

Source entries (2)

Hackmageddon cyber attacks timelines (Paolo Passeri)

Unknown Organizations · 13/11/2024

Researchers at Group-IB discover a new technique leveraged by the North Korean threat actor Lazarus that abuses extended attributes for macOS files to smuggle a new malware called RustyAttr. [Date Occurred: -; Date Discovered: -]

https://www.hackmageddon.com/2025/02/06/1-15-november-2024-cyber-attacks-timeline/

https://thehackernews.com/2024/11/new-rustyattr-malware-targets-macos.html

Group-IB blog

Stealthy Attributes of APT Lazarus | Group-IB Blog · 2024-11-13T05:55:12+00:00

In this blog, we examine a fresh take on techniques regarding concealing codes in Extended Attributes in order to evade detection in macOS systems. This is a new technique that has yet to be included in the MITRE ATT&CK framework.

https://www.group-ib.com/blog/stealthy-attributes-of-apt-lazarus/

Suggest a correction on GitHub