Lazarus exploitation of Windows kernel vulnerability to enhance FudModule rootkit; Kimsuky PyPI supply chain

CYFIRMA research

Kimsuky expanded its reach across the APAC region using sophisticated malware deployment techniques to maintain covert access along with creating supply chain attack opportunities using PyPI software repositories. Simultaneously, Lazarus Group exploited a new Windows kernel vulnerability to enhance their FudModule rootkit, facilitating deep system manipulation and evading advanced security measures.