North Korea-linked Lazarus APT used Windows Update client and GitHub in recent attacks
Security Affairs
JANUARY 27, 2022
This threat actor has been active since at least 2009, possibly as early as 2007, and it was involved in both cyber espionage campaigns and sabotage activities aimed to destroy data and disrupt systems. The group keeps updating its toolset to evade security mechanisms.” ” concludes the report that also included IoCs.
80 
Let's personalize your content