UN Panel of Experts S/2024/215
A Cascade of Compromise: Kaspersky Exposes Lazarus’ New Campaign Exploiting Legitimate Software | Kaspersky · October
Annex 59: List of DPRK Cyberthreat actors’ malicious activities monitored by the Panel in 2023 (row 51 of 75, PDF p. 328). DPRK cyber actor: Lazarus Group; Report Name: A Cascade of Compromise: Kaspersky Exposes Lazarus’ New Campaign Exploiting Legitimate Software | Kaspersky; Case Summary: The Lazarus Group carried out a persistent campaign to compromise a software vender with the likely objective of stealing valuable source code or tampering with the software supply chain, along with targeting of other software makers and attacks on victims targeted through a supply chain attack of security software. The actors deployed SIGNBT and LPEClient.; Publication Month: October