Security News > 2023 > December > Lazarus Group Using Log4j Exploits to Deploy Remote Access Trojans

2023-12-11 13:00
The notorious North Korea-linked threat actor known as the Lazarus Group has been attributed to a new global campaign that involves the opportunistic exploitation of security flaws in Log4j to deploy previously undocumented remote access trojans (RATs) on compromised hosts. Cisco Talos is tracking the activity under the name Operation Blacksmith, noting the use of three DLang-based
News URL
https://thehackernews.com/2023/12/lazarus-group-using-log4j-exploits-to.html
Related news
- Malicious Go Package Exploits Module Mirror Caching for Persistent Remote Access (source)
- QakBot-Linked BC Malware Adds Enhanced Remote Access and Data Gathering Features (source)
- Kimsuky hackers use new custom RDP Wrapper for remote access (source)
- New “whoAMI” Attack Exploits AWS AMI Name Confusion for Remote Code Execution (source)