New Lazarus campaign uses legitimate software
The Lazarus Group's APT (Advanced Persistent Threat) campaign attacks organizations worldwide. The malicious program used for the compromise is distributed via legitimate software. Kaspersky's Global Research and Analysis Team (GReAT) has identified a number of cybersecurity incidents in which victims were infected using legitimate software designed to encrypt online communications via digital certificates. Even though the vulnerabilities have been reported and patched, organizations worldwide continue to use the malicious version of the software, opening the door for the notorious Lazarus group to enter their network. Sophisticated attack scheme via supply chain infection of legitimate…