CYFIRMA research
Operation Dream Magic (MagicLine4NX exploitation via compromised news website) · Q4 2023 (from title: APT QUARTERLY HIGHLIGHTS : Q4 - 2023)
Another cyber-attack named Operation Dream Magic emerged in Q4, and it has been attributed to the Lazarus group from North Korea. The attackers are using a flaw in MagicLine4NX software, affecting versions before 1.0.026. They start by compromising a news website and embedding harmful code.