Collaborate Disseminate
In mid-2020, we realized that Lazarus was launching attacks on the defense industry using the ThreatNeedle cluster, an advanced malware cluster of Manuscrypt (a.k.a. NukeSped). While investigating this activity, we were able to observe the complete life cycle of an attack, uncovering more technical details and links to the group’s other campaigns. Continue reading Lazarus targets defense industry with ThreatNeedle
Trio alleged to have been at it for more than a decade, and to have made off with well over a billion dollars. Continue reading US names three North Koreans in laundry list of cybercrime charges
As the COVID-19 crisis grinds on, some threat actors are trying to speed up vaccine development by any means available. We have found evidence that actors, such as the Lazarus group, are going after intelligence that could help these efforts by attacking entities related to COVID-19 research. Continue reading Lazarus covets COVID-19-related intelligence
Noted Apple security expert Patrick Wardle discusses how cybercriminals are stepping up their game in targeting Apple users with new techniques and cyberattacks. Continue reading Patrick Wardle on Hackers Leveraging ‘Powerful’ iOS Bugs in High-Level Attacks
The Lazarus Group (also known as Guardians of Peace or Whois) is a notorious cybercrime gang made up of unknown individuals. According to the United States Federal Bureau of Investigations, the group is a North Korean “state-sponsored hacking organizat… Continue reading How to Protect Your Business From Multi-Platform Malware Systems
Let us review the forecasts we made at the end of 2019 and see how accurate we were. Then we will go through the key events of 2020 relating to financial attacks. Finally, we need to make a forecast of financial attacks in 2021. Continue reading Cyberthreats to financial organizations in 2021
Lazarus Group is believed to be behind a spate of attacks that leverage stolen digital certificates tied to browser software that secures communication with government and financial websites in South Korea. Continue reading Hacked Security Software Used in Novel South Korean Supply-Chain Attack
The Lazarus group leveraged a supply chain attack to target users located in South Korea with custom malware. On November 16, ESET disclosed that the Lazarus group conducted its supply chain attack by abusing WIZVERA VeraPort. This application helps us… Continue reading Lazarus Group Used Supply Chain Attack to Target South Korean Users with Malware
Hospitals in New York and Oregon were targeted on Tuesday by threat actors who crippled systems and forced ambulances with sick patients to be rerouted, in some cases. Continue reading More Hospitals Hit by Growing Wave of Ransomware Attacks
Complaint details collaboration with China to funnel $250m in stolen funds as part of state-sponsored attacks. Continue reading DoJ Aims to Seize 280 Cryptocurrency Accounts Used by Hackers