malware
Operation FlashHole: Lazarus breaks security, defies control
Medium
Summary
Operation FlashHole: The Lazarus Group has launched a new attack campaign against South Korea, leveraging a sophisticated malware chain centered around CrossWeb EX, a mandatory security software. The group employs a multi-stage attack, utilizing TechHub to establish a connection and then deploying Cubridge to orchestrate the payload delivery and maintain persistence on compromised systems. The campaign demonstrates Lazarus's continued evolution and adaptation of tactics, including the use of GitHub for command and control and AI-generated content.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data