#lazarus
-
Lazarus Exploited a Windows 0-Day to Attack Defense Firms
The North Korean group Lazarus exploited a zero-day vulnerability in AFD.sys for privilege escalation as part of the Operation Dream Job campaign, targeting the defense sector in Europe, India and Latin America.
-
The AnySign4PC Attack: Infecting South Koreans Without a Single Click
South Korean authorities and four cybersecurity firms have uncovered an espionage campaign: compromised legitimate websites exploited a vulnerability in local electronic-signature software to silently install the SIGNBT and COPPERHEDGE backdoors.