Lazarus

Lazarus BTC Changer. Back in action with JS sniffers redesigned to steal cryptoLazarus BTC Changer. Back in action with JS sniffers redesigned to steal crypto

Lazarus BTC Changer. Back in action with JS sniffers redesigned to steal crypto

Group-IB observed the North Korea-linked Lazarus APT group stealing cryptocurrency using a never-before-seen tool. In the last five years, JavaScript…

4 years ago
Group-IB: ransomware empire prospers in pandemic-hit world. Attacks grow by 150%Group-IB: ransomware empire prospers in pandemic-hit world. Attacks grow by 150%

Group-IB: ransomware empire prospers in pandemic-hit world. Attacks grow by 150%

Group-IB published a report titled “Ransomware Uncovered 2020-2021”. analyzes ransomware landscape in 2020 and TTPs of major threat actors. Group-IB, a…

4 years ago
North Korea-linked Lazarus APT targets defense industry with ThreatNeedle backdoorNorth Korea-linked Lazarus APT targets defense industry with ThreatNeedle backdoor

North Korea-linked Lazarus APT targets defense industry with ThreatNeedle backdoor

North Korea-linked Lazarus APT group has targeted the defense industry with the custom-backdoor dubbed ThreatNeedle since 2020. North Korea-linked Lazarus…

4 years ago
Israel announced to have foiled an attempted cyber-attack on defence firmsIsrael announced to have foiled an attempted cyber-attack on defence firms

Israel announced to have foiled an attempted cyber-attack on defence firms

Israel 's defence ministry announced to have foiled an attempted cyber attack by a foreign threat actors group targeting the…

5 years ago
North Korea-linked Lazarus APT continues to target cryptocurrency exchangesNorth Korea-linked Lazarus APT continues to target cryptocurrency exchanges

North Korea-linked Lazarus APT continues to target cryptocurrency exchanges

In the last 18 months, North Korea-linked Lazarus APT group has continued to target cryptocurrency exchanges evolving its TTPs. Kaspersky…

5 years ago
Dacls RAT, the first Lazarus malware that targets Linux devicesDacls RAT, the first Lazarus malware that targets Linux devices

Dacls RAT, the first Lazarus malware that targets Linux devices

Researchers spotted a new Remote Access Trojan (RAT), dubbed Dacls, that was used by the Lazarus APT group to target…

6 years ago
Exclusive – Analysis of the sample that hit the Kudankulam Nuclear Power PlantExclusive – Analysis of the sample that hit the Kudankulam Nuclear Power Plant

Exclusive – Analysis of the sample that hit the Kudankulam Nuclear Power Plant

Expert Marco Ramilli and his team analyzed the sample that infected systems at the Kudankulam Nuclear Power Plant, it is…

6 years ago
CVE-2019-13720 flaw in Chrome exploited in Operation WizardOpium attacksCVE-2019-13720 flaw in Chrome exploited in Operation WizardOpium attacks

CVE-2019-13720 flaw in Chrome exploited in Operation WizardOpium attacks

One of the two flaws in Chrome addressed by Google, CVE-2019-13720, was exploited in a campaign that experts attribute to…

6 years ago
DHS and FBI published a Malware Analysis Report on North Korea-linked tool ELECTRICFISHDHS and FBI published a Malware Analysis Report on North Korea-linked tool ELECTRICFISH

DHS and FBI published a Malware Analysis Report on North Korea-linked tool ELECTRICFISH

The U.S. Department of Homeland Security (DHS) and the FCI published a new joint report on ELECTRICFISH, a malware used…

6 years ago
FBI/DHS MAR report details HOPLIGHT Trojan used by Hidden Cobra APTFBI/DHS MAR report details HOPLIGHT Trojan used by Hidden Cobra APT

FBI/DHS MAR report details HOPLIGHT Trojan used by Hidden Cobra APT

According to a joint report published by the United States Department of Homeland Security (DHS) and Federal Bureau of Investigation…

6 years ago