Lazarus's timeline in 2024-lazarusholic

2024-03-25
Aliyun
推陈出新！Kimsuky组织最新远控组件攻击场景复现
#Kimsuky

2024-03-25
Logpresso
Kimsuky의 TrollAgent를 탐지하는 YARA rule 작성가이드
#Kimsuky #TrollAgent #YARA

2024-03-22
errbody
Kimsuky-Android-RAT-Client
#Kimsuky

2024-03-22
Hauri
DropBox를 이용한 Kimsuky 악성코드
#Kimsuky #LNK

2024-03-21
Symantec
Springtail APT group abuses valid certificate of known Korean public entity
#Springtail

2024-03-21
SecuI
"북한지 기고문"을 위장하여 유포된 LNK 악성코드
#APT37 #RokRAT #LNK

2024-03-20
Symantec
New DEEP#GOSU campaign attributed to Springtail APT (aka Kimsuky)
#Springtail

2024-03-20
Rapid7
The Updated APT Playbook: Tales from the Kimsuky threat actor group
#Kimsuky #CHM

2024-03-19
Ahnlab
Andariel Group Exploiting Korean Asset Management Solutions (MeshAgent)
#ModeLoader #Andariel #AndarLoader #MeshAgent

2024-03-19
Ahnlab
국내 공공기관의 설치 파일을 위장한 악성코드 (Kimsuky 그룹)
#Kimsuky #Endoor #Nikidoor #AsungSoft

2024-03-18
Securonix
Analysis of New DEEP#GOSU Attack Campaign Likely Associated with North Korean Kimsuky Targeting Victims with Stealthy Malware
#Kimsuky #LNK #DeepGosu

2024-03-17
Cyberpoking
H0lyGh0st (SiennaPurple) Ransomware
#H0lyGh0st #YARA

2024-03-15
Qihoo360
APT-C-55（Kimsuky）组织的RandomQuery窃密攻击活动分析
#APT-C-55 #RandomQuery

2024-03-14
RustyNoob619
Detects a malicious DLL used by a North Korean Threat actor Lazarus
#YARA

2024-03-14
Ahnlab
AhnLab EDR을 활용한 웹 브라우저 계정 정보 탈취 악성코드 탐지
#Andariel

2024-03-14
Elliptic
North Korean Hackers Return to Tornado Cash Despite Sanctions
#HECO #HTX #MoneyLaundering

2024-03-13
Genians
비트코인 시세 급등에 따른 해킹 피해 주의보
#Konni #LNK

2024-03-12
somedieyoungZZ
Kimsuky 3
#Kimsuky #YARA

2024-03-12
ESTSecurity
북 킴수키(Kimsuky) 조직의 정책 자문 위장 스피어 피싱 주의!
#Kimsuky

2024-03-11
Ahnlab
국내 자산 관리 솔루션을 악용하여 공격 중인 Andariel 그룹 (MeshAgent)
#ModeLoader #Andariel #AndarLoader #MeshAgent

lazarusholic