ESET Threat Report T3 2022 (DPRK-related paragraph 1)

ESET WeLiveSecurity

The final months of 2022 were bustling with interesting ESET research findings. Our researchers discovered a MirrorFace spearphishing campaign against high-profile Japanese political entities, and new ransomware named RansomBoggs that targets multiple organizations in Ukraine and has Sandworm’s fingerprints all over it. ESET researchers also discovered a campaign conducted by the infamous Lazarus group that targets its victims with spearphishing emails containing documents with fake job offers; one of the lures was sent to an aerospace company employee. As for supply-chain attacks, we found a new wiper and its execution tool, both of which we attribute to the Agrius APT group , aiming at users of an Israeli software suite used in the diamond industry.