Validin blog
Hunting Lazarus: Expanding Indicators with Historic DNS (meeting-themed phishing domains) · 2024-07-15T00:00:00Z
Lazarus Group uses phishing and impersonation tactics to deceive its victims and is known for using meeting-themed domain names in its phishing attempts. ... In this post, we will demonstrate how to use historical DNS with detailed annotations to expand from known indicators and discover current and recent domain names and IP addresses associated with Lazarus Group with high confidence.