Kaspersky Securelist
IT threat evolution Q2 2023 (DPRK-related paragraph 7) · 2023-08-30
In early June 2021, the Lazarus group began utilizing a new infection mechanism against targets in South Korea. One thing that caught our attention was that the initial stage of the malware was executed by a legitimate security software that is widely used in the country. It’s thought that the malware was spread through a vulnerability in the software.