Security News

Lazarus Group Deploys Marstech1 JavaScript Implant in Targeted Developer Attacks
2025-02-14 18:28

The North Korean threat actor known as the Lazarus Group has been linked to a previously undocumented JavaScript implant named Marstech1 as part of limited targeted attacks against developers. The...

Cross-Platform JavaScript Stealer Targets Crypto Wallets in New Lazarus Group Campaign
2025-02-05 14:55

The North Korea-linked Lazarus Group has been linked to an active campaign that leverages fake LinkedIn job offers in the cryptocurrency and travel sectors to deliver malware capable of infecting...

Lazarus Group Uses React-Based Admin Panel to Control Global Cyber Attacks
2025-01-29 16:56

The North Korean threat actor known as the Lazarus Group has been observed leveraging a "web-based administrative platform" to oversee its command-and-control (C2) infrastructure, giving the...

How Lazarus Group built a cyber espionage empire
2025-01-29 09:03

Since September 2024, SecurityScorecard’s STRIKE team has been investigating Lazarus Group’s activity, uncovering key details about their infrastructure. Despite variations in payload delivery and...

Lazarus Group Targets Web3 Developers with Fake LinkedIn Profiles in Operation 99
2025-01-15 15:37

The North Korea-linked Lazarus Group has been attributed to a new cyber attack campaign dubbed Operation 99 that targeted software developers looking for freelance Web3 and cryptocurrency work to...

Lazarus Group Spotted Targeting Nuclear Engineers with CookiePlus Malware
2024-12-20 10:44

The Lazarus Group, an infamous threat actor linked to the Democratic People's Republic of Korea (DPRK), has been observed leveraging a "complex infection chain" targeting at least two employees...

Lazarus Group Exploits Google Chrome Vulnerability to Control Infected Devices
2024-10-24 09:53

The North Korean threat actor known as Lazarus Group has been attributed to the zero-day exploitation of a now-patched security flaw in Google Chrome to seize control of infected devices....

Feds reach for sliver of crypto-cash nicked by North Korea's notorious Lazarus Group
2024-10-08 00:27

A couple million will do for a start … but Kim's crews are suspected of stealing much more The US government is attempting to claw back more than $2.67 million stolen by North Korea's Lazarus...

Developers Beware: Lazarus Group Uses Fake Coding Tests to Spread Malware
2024-09-11 09:46

Cybersecurity researchers have uncovered a new set of malicious Python packages that target software developers under the guise of coding assessments. "The new samples were tracked to GitHub...

Microsoft Patches Zero-Day Flaw Exploited by North Korea’s Lazarus Group
2024-08-19 07:05

A newly patched security flaw in Microsoft Windows was exploited as a zero-day by Lazarus Group, a prolific state-sponsored actor affiliated with North Korea. The security vulnerability, tracked...