lazarusholic

Everyday is lazarus.dayβ

Kmsec

https://kmsec.uk

Reports

2026-05-01
Kmsec
North Korea's abuse of Cloudflare Workers and Pages
#FamousChollima #NPM #PylangGhost
2026-03-17
Kmsec
Contagious Trader campaign - Coordinated weaponisation of cryptocurrency trading bots by suspected DPRK malware operators
#ContagiousTrader #FamousChollima #NPM
2026-03-13
Kmsec
First instance of PylangGhost RAT observed on npm
#FamousChollima #PylangGhost #NPM
2026-02-26
Kmsec
Novel DPRK stager using Pastebin and text steganography
#FamousChollima #NPM #Steganography
2026-02-22
Kmsec
Tracking DPRK operator IPs over time
#FamousChollima #NPM
2026-02-21
Kmsec
DPRK tests Google Drive as a malware stager
#FamousChollima #NPM
2026-02-16
Kmsec
Exposed DPRK reference malware and logs
#FamousChollima #NPM
2026-02-13
Kmsec
VMWare artifacts left by a FAMOUS CHOLLIMA operator
#FamousChollima #NPM
2026-01-19
Kmsec
npm package bigmathix and the BigSquatRat campaign behind it
#BigSquatRat #Suspicious