The Lazarus group has tweaked its loader obfuscation techniques by abusing image files in a recent phishing campaign. Lazarus is a state-sponsored advanced persistent threat (APT) group from North Korea.
Read full article on ZDNet
Lazarus hacking group now hides payloads in BMP image files
- Win 95, LastPass, Kubernetes, Sandworm, Bloomtech, Frontier, 911, Aaran Leyland… – SWN #379
- 5.3M World-Check records may be leaked; how to check your records
- Sacramento airport goes no-fly after AT&T internet cable snipped
- Active adversary report: Ransomware hit a ceiling, but security teams at risk for more pain
- Akira takes in $42 million in ransom payments, now targets Linux servers