Kaspersky Securelist
IT threat evolution Q1 2021 (DPRK-related paragraph 2) · 2021-05-31
Lazarus made use of COVID-19 themes in its spear-phishing emails, embellishing them with personal information gathered using publicly available sources. Once the victim opens an infected document and agrees to enable macros, the malware is dropped onto the system and proceeds to a multi-stage deployment procedure.