求职陷阱：Lazarus组织以日本瑞穗銀行等招聘信息为诱饵的攻击活动分析
2022-11-29 • Qianxin • Job-hunting trap: Lazarus attack campaign using Japanese Mizuho Bank recruitment information as bait •
QiAnXin RedDrip reports a Lazarus campaign using a VHD disk image themed around Japanese Mizuho Bank recruitment information. The lure presents a Job Description PDF while a loader executes from the disk image, copies and decrypts a DLL payload, loads it with LoadLibraryW, and proceeds with RC4-based configuration handling, reflecting a job-themed intrusion chain against Windows users.
Indicators of Compromise
Related Actors
Related Reports
2025-08-13 •
60% Match
#Lazarus
#T1102.002
#T1082
#T1059.003
#T1567.002
#T1140
#T1584.004
#T1005
#T1070.004
#T1587.001
#T1041
#T1560
#T1608.001
#T1071.001
#T1046
#T1083
#T1056.001
#T1204.001
#T1036
#T1027
#T1204.002
#T1566.002
#T1566.003
#T1124
#T1057
#T1059.005
#T1583.006
#T1566.001
#T1547.001
#T1585.002
#T1053.005
#T1583.001
#T1059.001
#T1036.005
#T1132.001
#T1001.003
#T1585.001
#T1497.001
#T1105
#T1553.002
#T1620
#T1574.002
#T1562.001
#T1027.002
#T1489
#T1078
#T1008
#T1571
#T1491.001
#T1218
#T1220
#T1203
#T1189
#T1049
#T1564.001
#T1098
#T1016
#T1074.001
#T1588.002
#T1562.004
#T1591
#T1218.011
#T1583.004
#T1036.004
#T1588.003
#T1218.010
#T1593.001
#T1218.005
#T1589.002
#T1584.001
#T1070.006
#T1048.003
#T1134.002
#T1027.007
#T1021.001
#T1106
#T1090.001
#T1573
#T1070
#T1047
#T1574.013
#T1561.001
#T1036.003
#T1529
#T1055.001
#T1614.001
#T1010
#T1021.002
#T1033
#T1543.003
#T1485
#T1090.002
#T1542.003
#T1560.002
#T1012
#T1110
#T1547.009
#T1110.003
#T1534
#T1588.004
#T1104
#T1591.004
#T1561.002
#T1608.002
#T1202
#T1221
#T1557.001
#T1087.002
#T1560.003
#T1070.003
#T1021.004
Shares tags: Lazarus, T1087.002
2025-04-24 •
60% Match
#ThreatNeedle
#LPEClient
#SIGNBT
#AGAMEMNON
#Lazarus
#Innorix
#SyncHole
#CrossEX
#T1027.013
#T1082
#T1140
#T1071.001
#T1083
#T1057
#T1583.003
#T1583.001
#T1105
#T1620
#T1574.002
#T1135
#T1573.001
#T1190
#T1189
#T1049
#T1573.002
#T1016
#T1087.001
#T1218.011
#T1584.001
#T1574.001
#T1564.004
#T1027.009
#T1569.002
#T1543.003
#T1087.002
#T1570
#T1608.004
#T1547.005
#T1007
#Copperhedge
Shares tags: Lazarus, T1087.002
2024-07-19 •
60% Match
#Trend
#Andariel
#Kimsuky
#MoonstoneSleet
#Lazarus
#T1082
#T1059.003
#T1090
#T1140
#T1005
#T1070.004
#T1041
#T1113
#T1555
#T1560
#T1071.001
#T1046
#T1112
#T1115
#T1083
#T1497
#T1056.001
#T1036
#T1027
#T1204.002
#T1566.002
#T1555.003
#T1071
#T1124
#T1222
#T1552
#T1057
#T1583.003
#T1518.001
#T1547.001
#T1053.005
#T1539
#T1608.005
#T1583.001
#T1059.001
#T1053
#T1552.001
#T1566
#T1059
#T1003
#T1497.001
#T1102.001
#T1574.002
#T1562.001
#T1490
#T1486
#T1129
#T1133
#T1571
#T1548
#T1190
#T1203
#T1564.001
#T1087
#T1562.004
#T1218.011
#T1070.006
#T1547
#T1068
#T1614
#T1573
#T1095
#T1562
#T1070
#T1047
#T1056
#T1176
#T1010
#T1033
#T1569.002
#T1543.003
#T1485
#T1012
#T1202
#T1087.002
#T1021.004
#T1222.001
#T1518
#T1564.003
#T1505.003
#T1069.002
#T1564
#T1595.002
#T1027.005
#T1070.001
#T1056.004
#T1584
Shares tags: Lazarus, T1087.002
Shares tag: Lazarus • Published within a month
Shares tag: Lazarus • Published within a week
Shares tag: Lazarus • Published within a month