UN Panel of Experts S/2024/215
“Detailed Malware Analysis Report: Putty disguised as malware (Lazarus APT),” Hauri · 9 October 2023
Annex 99 (Select reports of DPRK cyber actors targeting the cryptocurrency industry), report 4: “Detailed Malware Analysis Report: Putty disguised as malware (Lazarus APT),” Hauri, 9 October 2023. Summary: Since June 2022, the Lazarus Group actors have been creating malware by modifying open source software (such as PuTTY, KiTTY, TightVNC, Sumatra PDF Reader, and muPDF/Subliminal Recording), and have also pretended to be recruiters on LinkedIn in order to target victims with malware.