DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Lazarus APT conceals malicious code within BMP image to drop its RAT

Date (as written)
2021-04-19T22:00:00+00:00
Year
2021
Country
South Korea
Actors (as written)
Lazarus APT
Actor pages
Lazarus APT
Tags (as written)
security researchers

Source entries (1)

Malwarebytes Labs / ThreatDown blog

Lazarus APT conceals malicious code within BMP image to drop its RAT · 2021-04-19T22:00:00+00:00
On April 13, we identified a document used by this actor to target South Korea. In this campaign, Lazarus resorted to an interesting technique of BMP files embedded with malicious HTA objects to drop its Loader.
https://www.threatdown.com/blog/lazarus-apt-conceals-malicious-code-within-bmp-image-to-drop-its-rat

Suggest a correction on GitHub