Operation SyncHole from Lazarus

Operation SyncHole from Lazarus

Operation SyncHole is a cyber espionage campaign orchestrated by the Lazarus Group, a North Korean Advanced Persistent Threat (APT) actor. This operation targets South Korean supply chains across industries such…
Holy Ghost Ransomware

Holy Ghost Ransomware

Holy Ghost, a tiny ransomware operator likely being managed by North Korean hackers. Microsoft Threat Intelligence Center has been tracking the malware variant and has found multiple evidence pointing to…
Lazarus Hijacks Windows Update Client

Lazarus Hijacks Windows Update Client

Lazarus cybercrime group ties to the North Korean government is a well known one, now it has managed to abuse the Windows Update Client to distribute malware. The researchers said…
Lazarus hits with Trojanized IDA

Lazarus hits with Trojanized IDA

Lazarus, the North Korea affiliated state-sponsored group, is attempting to once again target security researchers with backdoors and remote access trojans using a trojanized pirated version of the popular IDA…

North Korea or Russia is Lazarus belongs

North Korean state-sponsored cybercriminals have been time and again accused of buying access to pre-hacked servers from other threat actors. However, lately, connections have emerged between the North Korea-based Lazarus…