Lazarus

TraderTraitor macOS Backdoors Target IT Service Firms

• Cybercriminals

TraderTraitor macOS Backdoors Target IT Service Firms

Do Son September 28, 2026 0

SentinelOne discovered how new TraderTraitor macOS backdoors hit IT firms. Learn how TraderTraitor macOS backdoors use weaponized Terraform files.

Lazarus Exploits Windows Zero-Day in Operation Dream Job Attacks

• Cybercriminals

Lazarus Exploits Windows Zero-Day in Operation Dream Job Attacks

Do Son August 12, 2026 0

Lazarus exploited a Windows zero-day (CVE-2026-68820) in Operation Dream Job to hit defense firms with fake job offers and a new backdoor.

Lazarus-Linked npm Malware Masquerades as Rollup Polyfills

• Cybercriminals

Lazarus-Linked npm Malware Masquerades as Rollup Polyfills

Do Son July 3, 2026 0

New Lazarus npm malware masquerades as Rollup polyfills, hiding remote-access and wallet-theft payloads. JFrog uncovered six malicious packages.

Lazarus Group Deploys Electron-Based Malware to Target Cryptocurrency Enthusiasts

• Cyber Security
• Malware

Lazarus Group Deploys Electron-Based Malware to Target Cryptocurrency Enthusiasts

Do Son January 26, 2025 0

Learn about Lazarus Group's latest attack targeting cryptocurrency professionals. Discover how they weaponized a legitimate open-source project to steal sensitive information.

IPMsg Installer Weaponized: Lazarus Group Targets Crypto & Finance

• Cyber Security

IPMsg Installer Weaponized: Lazarus Group Targets Crypto & Finance

Do Son December 30, 2024 0

Stay informed about the latest cyber espionage tactics. Learn how the Lazarus group is targeting financial institutions with a weaponized IPMsg installer.

Stealthy Process Injection: New Kernel Callback Table Technique Exposed

• Malware
• Open Source Tool

Stealthy Process Injection: New Kernel Callback Table Technique Exposed

Do Son November 5, 2024 0

Discover how Kernel Callback Tables can be manipulated for process injection on Windows systems. Learn about the stealthy method employed by high-profile threat actors.

LilacSquid APT Unveiled: A Stealthy Campaign Targeting Global Industries

• Cyber Security
• Malware

LilacSquid APT Unveiled: A Stealthy Campaign Targeting Global Industries

Do Son May 31, 2024 0

LilacSquid deploys a series of malicious tools, including MeshAgent, a customized version of QuasarRAT, dubbed "PurpleInk,"

CISA Warns of Active Exploitation of Windows Kernel Vulnerability

• Cyber Security
• Vulnerability

CISA Warns of Active Exploitation of Windows Kernel Vulnerability

Do Son March 5, 2024 0

CISA has added a critical Windows Kernel vulnerability (CVE-2024-21338) to its Known Exploited Vulnerabilities catalog

North Korean APT’s Stealth Attack on Open-Source Ecosystems

• Malware
• Vulnerability

North Korean APT’s Stealth Attack on Open-Source Ecosystems

Do Son January 7, 2024 0

QiAnXin Threat Intelligence Center's detailed analysis linked the binary involved in this operation to a North Korean APT

Kaspersky Lab Exposes TTPs of Asian Cyber Espionage Groups

• Cyber Security

Kaspersky Lab Exposes TTPs of Asian Cyber Espionage Groups

Do Son November 9, 2023 0

Kaspersky Lab has unveiled a comprehensive analysis of the operations of Asian cyber espionage groups conducting espionage activities globally

Kaspersky Reveals Lazarus’ Sophisticated Techniques in Targeting Software Vendors

• Cyber Security
• Malware

Kaspersky Reveals Lazarus’ Sophisticated Techniques in Targeting Software Vendors

Do Son October 27, 2023 0

Lazarus group, with its sophisticated methods and unwavering motivations, continues to be a formidable adversary in the digital realm

DeathNote Malware: Lazarus Group’s New Weapon Against Defense Industry

• Cyber Security
• Malware

DeathNote Malware: Lazarus Group’s New Weapon Against Defense Industry

Do Son April 12, 2023 0

In mid-October 2019, security researchers discovered a significantly modified piece of malware, named the active cluster DeathNote