DLL Side-Loading attack · October
Annex 76: List of DPRK cyberthreat actors' malicious activities in 2022 monitored by the Panel (table row 29 of 37). RGB Unit: Lazarus Group; Case Name: DLL Side-Loading attack; SPH √; VAS: (blank); Publicized Month: October. (Note: RGB Reconnaissance General Bureau, SPH Significant Phishing, KAC knowledge acquisition and espionage, VAS virtual asset seizures.)
DLL side-loading attacks and vulnerable driver modules
Annex 79: “In another case, cybersecurity firm reports acquired by the Panel demonstrates that the Lazarus Group has been using a ‘DLL Side-Loading attack technique’ which abuses legitimate applications in the initial compromise stage to bypass the detection of security software ... In addition, the Lazarus Group also utilized vulnerable driver modules in its attack process to disable all internal monitoring systems of a victim’s computer, including anti-virus programmes.”