#CommsCacher

Malware/Tool

2021-04-27 • Lazarus Group Recruitment: Threat Hunters vs Head Hunters

A Lazarus backdoor disguised as a modified SQLite library that maintained persistence through a startup shortcut, monitored RDP sessions, exchanged encrypted configuration and shellcode with command-and-control servers, and relayed data through a named pipe.

Tagged Reports

« Back