NCC Group
North Korea’s Lazarus: their initial access trade-craft using social media and social engineering · (no date on page)
This blog post documents some of the actions taken during the initial access phase for an attack attributed to Lazarus, along with analysis of the malware that was utilised during this phase.