PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

APT LAZARUS và chiến dịch tấn công các chuyên gia bảo mật

blog.viettelcybersecurity.com | blog | #threat-intelligence | #social-engineering | #apt | #north-korea | #lazarus | #google-tag
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Google TAG uncovered a fake security firm, SecuriElite, linked to North Korea's Lazarus (Zinc), using Twitter and LinkedIn accounts to lure security researchers into exploit-laden traps.
Published
Collected

Related coverage

research · hunt.io
Ukraine’s State Data-Exchange System Targeted by Russian-Speaking Operator via Graylog Log4Shell
An exposed open directory revealed a solo operator's full Log4Shell chain against a Graylog host holding Trembita logs, with the access log that proves execution.
research · wiz.io
TraderTraitor: Deep Dive
Wiz Threat Research profiles TraderTraitor, the North Korean Lazarus subgroup behind the $1.5B Bybit hack and DMM's $308M heist — tracing its shift from phishing to supply-chain and cloud attacks.
vulnerability · volexity.com
DriftingCloud: Zero-Day Sophos Firewall Exploitation and an Insidious Breach
Volexity frequently works with individuals and organizations heavily targeted by sophisticated, motivated, and well-equipped threat actors from around the world. Some of these individuals or organizations are attacked infrequently or […]
research · volexity.com
North Korean BLUELIGHT Special: InkySquid Deploys RokRAT
In a recent blog post, Volexity disclosed details on a portion of the operations by a North Korean threat actor it tracks as InkySquid. This threat actor compromised a news […]
vulnerability · volexity.com
North Korean APT InkySquid Infects Victims Using Browser Exploits
Volexity recently investigated a strategic web compromise (SWC) of the website of the Daily NK (www.dailynk[.]com), a South Korean online newspaper that focuses on issues relating to North Korea. Malicious […]
vulnerability · volexity.com
Active Exploitation of Newly Patched ColdFusion Vulnerability (CVE-2018-15961)
If your organization is running an Internet-facing version of ColdFusion, you may want to take a close look at your server. Volexity recently observed active exploitation of a newly patched […]
Back