#VestCert

Vulnerability/Target

2023-03-13 • 금융 보안 솔루션 업데이트 권고

VestCert is Yettiesoft non-ActiveX web security software used for certificate-based login on South Korean services. Lazarus exploited a zero-day remote-code-execution weakness through watering-hole sites, causing vulnerable Windows systems to launch PowerShell and download and execute additional malware.

Tagged Reports

« Back