lazarusholic

Everyday is lazarus.dayβ

#Wateringhole

Motivation

Incidents

2023-03
MagicLine
Korea, Republic of
#Wateringhole #Technology #Media #Defense
2020-07
KAMS
Korea, Republic of
#DataBreach #Healthcare #Wateringhole
2018-05
Sejong Institue
Korea, Republic of
#Espionage #Wateringhole #Research
2017-05
Labor Unions
Korea, Republic of
#Finance #Wateringhole
2016-10
Komisja Nadzoru Finansowego
Poland
#Finance #Wateringhole
2016-10
Comisión Nacional Bancaria y de Valores
Uruguay
#Finance #Wateringhole
2016-10
Banco Republica
Uruguay
#Finance #Wateringhole

Reports

2025-03-13
Ahnlab
Malicious HWP Document Disguised as Reunification Education Support Application
#Wateringhole #IPUS
2025-03-13
Ahnlab
통일 교육 지원서로 위장한 악성 한글 문서
#Wateringhole #IPUS
2025-03-07
ESTSecurity
Kimsuky 그룹의 워터링 홀 공격, 통일 분야 교육 지원서를 위장한 악성 파일 유포 주의
#Kimsuky #Wateringhole #IPUS
2024-01-25
KRCERT
Lazarus Group’s Large-scale Threats via Watering Hole and Financial Software
#Slides #Wateringhole
2023-10-17
Ahnlab
Lazarus Group's Operation Dream Magic
#DreamMagic #MagicLine4NX #Whitepaper #Wateringhole
2023-10-13
Ahnlab
Lazarus 조직의 Operation Dream Magic
#MagicLine4NX #Whitepaper #DreamMagic #Wateringhole
2023-06-28
KRCERT
TTPs #10 : Operation GoldGoblin - 제로데이 취약점을 이용, 선별적으로 침투하는 공격전략 분석
#Wateringhole #GoldGoblin #Media #Whitepaper #MagicLine4NX
2023-04-19
KRNPA
보안인증프로그램 취약점 악용 해킹 사건, 북(北) ‘라자루스’ 소행으로 확인
#News #CrossWebEX #Wateringhole
2023-03-21
Ahnlab
공인 인증 솔루션(MagicLine4NX) 취약점 주의 및 업데이트 권고
#MagicLine4NX #Wateringhole
2021-09-01
KRCERT
TTPs#6 타겟형 워터링홀 공격전략 분석
#Whitepaper #Wateringhole #Andariel #ByteTiger
2021-08-17
Volexity
North Korean APT InkySquid Infects Victims Using Browser Exploits
#Wateringhole #InkySquid #BLUELIGHT
2020-06-29
KRCERT
TTPs#2 스피어 피싱으로 정보를 수집하는 공격망 구성 방식 분석
#Phishing #Whitepaper #Wateringhole #BookCodes
2020-06-23
IssuemakersLab
Malicious HWP document in a notice on the KAMS
#DataBreach #Healthcare #Wateringhole #KAMS
2018-05-24
IssuemakersLab
North Korea's Watering Hole Attack History (case, Sejong Institute)
#Sejong #Wateringhole
2017-02-21
Cyber4sight
Analysis of Malware Used Watering-Hole Attacks Against Polish, Other Financial Institutions
#Wateringhole
2017-02-16
ESET
Demystifying targeted malware used against Polish banks
#Wateringhole #Finance #BROU #CNBV #KNF
2017-02-12
BaeSystems
LAZARUS & WATERING-HOLE ATTACKS
#Wateringhole #BROU #CNBV #KNF
2017-02-12
Symantec
Attackers target dozens of global banks with new malware
#Wateringhole #BROU #CNBV #KNF
2017-02-03
Badcyber
Several Polish banks hacked information stolen by unknown attackers
#Wateringhole #KNF