lazarusholic

Everyday is lazarus.dayβ

#SupplyChain

Motivation

Incidents

2025-02
Safe{Wallet}
Switzerland
#Cryptocurrency #FinancialGain #SupplyChain
2024-06
AnOctopus
Korea, Republic of
#SupplyChain #Technology
2024-03
Asung Soft
Korea, Republic of
#SupplyChain #Technology
2024-01
D2 Innovation
Korea, Republic of
#SupplyChain #Technology
2023-11
CyberLink
Taiwan
#SupplyChain #Technology
2023-06
JumpCloud
United States
#SupplyChain #Technology
2023-03
3CX
United States
#Technology #SupplyChain
2020-11
WizVera
Korea, Republic of
#Technology #SupplyChain
2019-07
MarkAny
Korea, Republic of
#Technology #SupplyChain
2018-09
WaveString
Korea, Republic of
#Cryptocurrency #SupplyChain
2018-07
RSupport
Korea, Republic of
#Technology #SupplyChain
2016-01
Initech
Korea, Republic of
#Technology #SupplyChain #SafePC

Reports

2025-03-04
KRNIS
국정원, S/W 공급망 관련 北해킹 확산 경고
#News #SupplyChain
2024-01-18
KRCERT
라자루스(Lazarus) 공격그룹의 특징 및 전망
#SupplyChain
2024-01-05
Phylum
Update to November’s Crypto-Themed npm Attack
#SupplyChain #NPM
2023-12-12
Checkmarx
How North Korea is Compromising Supply Chains
#SupplyChain #NPM
2023-11-04
Phylum
Crypto-Themed npm Packages Found Delivering Stealthy Malware
#SupplyChain #NPM
2023-05-02
Avertium
Lazarus and the 3CX Double Software Supply Chain Attack
#SupplyChain #3CXDesktopApp #SmoothOperator
2023-04-28
Ahnlab
EDR을 활용한 3CX 공급망 침해 사고 추적
#SupplyChain #3CXDesktopApp #SmoothOperator
2023-04-24
Sangfor
疑似3CX供应链攻击组织相关联的Linux样本分析
#SupplyChain #3CXDesktopApp #SmoothOperator
2023-04-22
KimZetter
Updates and Timeline for 3CX and X_Trader Hacks
#SupplyChain #3CXDesktopApp #SmoothOperator #X_Trader
2023-04-21
Symantec
X_Trader Supply Chain Attack Affects Critical Infrastructure Organizations in U.S. and Europe
#SupplyChain #3CXDesktopApp #SmoothOperator #X_Trader
2023-04-20
Krebsonsecurity
3CX Breach Was a Double Supply Chain Compromise
#SupplyChain #3CXDesktopApp #SmoothOperator #X_Trader
2023-04-20
USCISA
MAR-10435108-1.v1 ICONICSTEALER
#SupplyChain #3CXDesktopApp #SmoothOperator #ICONICSTEALER
2023-04-20
3CX
Mandiant Security Update – Initial Intrusion Vector
#SupplyChain #3CXDesktopApp #SmoothOperator #UNC4736 #X_Trader
2023-04-20
Mandiant
3CX Software Supply Chain Compromise Initiated by a Prior Software Supply Chain Compromise; Suspected North Korean Actor Responsible
#SupplyChain #UNC4736 #YARA #3CXDesktopApp #SmoothOperator #X_Trader #UNC4469 #UNC3782
2023-04-14
AttackIQ
Response to Lazarus' 3CX Supply Chain Compromise
#SupplyChain #3CXDesktopApp #SmoothOperator
2023-04-11
3CX
Security Update Mandiant Initial Results
#SupplyChain #YARA #UNC4736 #TAXHAUL #3CXDesktopApp #SmoothOperator
2023-04-05
struppigel
3CX SmoothOperator Authenticode Abuse
#SupplyChain #3CXDesktopApp #SmoothOperator #Youtube
2023-04-05
Ahnlab
3CX DesktopApp 공급망 공격, 국내에서도 확인
#SupplyChain #3CXDesktopApp #SmoothOperator
2023-04-03
struppigel
3CX SmoothOperator ffmpeg.dll with Binary Ninja
#SupplyChain #3CXDesktopApp #SmoothOperator #Youtube
2023-04-03
Kaspersky
Not just an infostealer: Gopuram backdoor deployed through 3CX supply chain attack
#SmoothOperator #SupplyChain #3CXDesktopApp #Gopuram
2023-04-03
ThreatRadar
3CX In The Wild
#SupplyChain #3CXDesktopApp #SmoothOperator
2023-04-03
HivePro
SmoothOperator Campaign Trojanizes 3CXDesktopApp
#SupplyChain #3CXDesktopApp #SmoothOperator
2023-04-03
piyokango
3CXのソフトウエア改ざんによるサプライチェーン攻撃についてまとめてみた
#SupplyChain #3CXDesktopApp #SmoothOperator
2023-04-01
Objective-see
Ironing out (the macOS) details of a Smooth Operator (Part II)
#SupplyChain #3CXDesktopApp #SmoothOperator #macOS
2023-03-31
Emanueledelucia
Understanding the magnitude of the 3CXDesktopApp phenomenon
#SupplyChain #3CXDesktopApp #SmoothOperator
2023-03-31
Splunk
Splunk Insights: Investigating the 3CXDesktopApp Supply Chain Compromise
#SupplyChain #3CXDesktopApp #SmoothOperator
2023-03-31
Group-IB
36gate: supply chain attack
#SmoothOperator #SupplyChain #3CXDesktopApp #36gate
2023-03-31
Cyble
A Comprehensive Analysis of the 3CX Attack
#SupplyChain #3CXDesktopApp #SmoothOperator
2023-03-30
ReversingLabs
Red flags flew over software supply chain-compromised 3CX update
#SupplyChain #3CXDesktopApp #SmoothOperator
2023-03-30
TrendMicro
Information on Attacks Involving 3CX Desktop App
#SupplyChain #3CXDesktopApp #SmoothOperator
2023-03-30
OpenAnalysis
3CX Supply Chain Attack
#SupplyChain #3CXDesktopApp #SmoothOperator
2023-03-30
Fortinet
3CX Desktop App Compromised (CVE-2023-29059)
#SupplyChain #3CXDesktopApp #SmoothOperator #CVE-2023-29059
2023-03-30
Rapid7
Backdoored 3CXDesktopApp Installer Used in Active Threat Campaign
#SupplyChain #3CXDesktopApp #SmoothOperator
2023-03-30
PaloaltoNetworks
Threat Brief: 3CXDesktopApp Supply Chain Attack
#SupplyChain #3CXDesktopApp #SmoothOperator
2023-03-30
CiscoTalos
Threat Advisory: 3CX Softphone Supply Chain Compromise
#SupplyChain #3CXDesktopApp #SmoothOperator
2023-03-30
3CX
3CX DesktopApp Security Alert
#SupplyChain #News #SmoothOperator #3CXDesktopApp
2023-03-30
Elastic
Elastic users protected from SUDDENICON’s supply chain attack
#SUDDENICON #SupplyChain #3CXDesktopApp #SmoothOperator
2023-03-30
Volexity
3CX Supply Chain Compromise Leads to ICONIC Incident
#SupplyChain #3CXDesktopApp #SmoothOperator #ICONIC #UTA0040
2023-03-30
NextronSystems
YARA rule set related to the 3CX incident
#SupplyChain #3CXDesktopApp #SmoothOperator #YARA
2023-03-30
Todyl
Threat Advisory: 3CX Softphone Telephony Campaign
#SupplyChain #3CXDesktopApp #SmoothOperator
2023-03-30
Huntress
3CX VoIP Software Compromise & Supply Chain Threats
#SupplyChain #3CXDesktopApp #SmoothOperator #YARA
2023-03-30
Symantec
3CX: Supply Chain Attack Affects Thousands of Users Worldwide
#SupplyChain #3CXDesktopApp #SmoothOperator
2023-03-29
Checkpoint
3CXDesktop App Supply Chain Attack - Check Point Software
#SupplyChain #3CXDesktopApp #SmoothOperator
2023-03-29
Objective-see
Ironing out (the macOS details) of a Smooth Operator
#SupplyChain #3CXDesktopApp #SmoothOperator #macOS
2023-03-29
Sophos
3CX users under DLL-sideloading attack: What you need to know
#SupplyChain #3CXDesktopApp #SmoothOperator
2023-03-29
SentinelOne
SmoothOperator | Ongoing Campaign Trojanizes 3CXDesktopApp in Supply Chain Attack
#SupplyChain #3CXDesktopApp #SmoothOperator
2023-03-29
CrowdStrike
CrowdStrike Prevents 3CXDesktopApp Intrusion Campaign
#LabyrinthChollima #3CXDesktopApp #SupplyChain #SmoothOperator
2020-11-16
ESET
Lazarus supply‑chain attack in South Korea
#SupplyChain #VeraPort #MagicLine4NX #BookCodes
2019-07-18
KRCERT
공급망 공격 사례 분석 및 대응 방안
#SupplyChain
2018-09-20
Kaspersky
Lazarus Group’s supply chain attack
#SupplyChain #WaveString
2018-08-21
TrendMicro
Supply Chain Attack Operation Red Signature Targets South Korean Organizations
#RedSignature #RSupport #SupplyChain
2011-09-24
Commandfive
SK Hack by an Advanced Persistent Threat
#SKHack #SupplyChain #Suspicious
2011-08-11
ESTSecurity
네이트 해킹 관련 경찰 중간조사결과 발표에 대한 입장
#SKHack #SupplyChain #Suspicious
2011-08-04
Hauri
SK 커뮤니케이션즈 해킹 관련 상세 분석 보고서
#SKHack #SupplyChain #Suspicious