AhnLab ASEC blog (asec.ahnlab.com)
RTF Malware Disguised as a Cover Letter for a Particular Airline · 2021-10-13
excerpt: In early October, the ASEC analysis team has discovered an RTF file-based malware disguised as a cover letter for a particular airline. This is not a type of document file format that appears often as other document-type malware (Word, Excel, etc.), and RTF malware disguised as a particular document hasn’t been discovered in a long […] | attribution sentence: It is thus assumed that the same attacker created this, and an external Twitter post mentions Lazarus as the attacker group who created the RTF.