#lazarusgroup — Public Fediverse posts

الاختراق المزدوج: قصة هجوم سلاسل التوريد المعقد على شركة 3CX

https://cybercases8.wordpress.com/2026/08/21/%d8%a7%d9%84%d8%a7%d8%ae%d8%aa%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d9%85%d8%b2%d8%af%d9%88%d8%ac-%d9%82%d8%b5%d8%a9-%d9%87%d8%ac%d9%88%d9%85-%d8%b3%d9%84%d8%a7%d8%b3%d9%84-%d8%a7%d9%84%d8%aa%d9%88%d8%b1/

الاختراق المزدوج: قصة هجوم سلاسل التوريد المعقد على شركة 3CX

https://cybercases8.wordpress.com/2026/08/21/%d8%a7%d9%84%d8%a7%d8%ae%d8%aa%d8%b1%d8%a7%d9%82-%d8%a7%d9%84%d9%85%d8%b2%d8%af%d9%88%d8%ac-%d9%82%d8%b5%d8%a9-%d9%87%d8%ac%d9%88%d9%85-%d8%b3%d9%84%d8%a7%d8%b3%d9%84-%d8%a7%d9%84%d8%aa%d9%88%d8%b1/

Σοκ: η «επίθεση» μπορεί να περάσει από συνέντευξη για δουλειά.

Έρευνα που συνδέεται με τη Βόρεια Κορέα δείχνει πώς ύποπτοι προγραμματιστές απέκτησαν κανονική πρόσβαση σε εταιρικά συστήματα, χρησιμοποιώντας ψεύτικες ταυτότητες, VPN και AI.

Αν μια εταιρεία προσλάβει το λάθος άτομο, μπορεί να το καταλάβει πολύ αργά.

Δες ποια μικρά σημάδια τους πρόδωσαν.

https://hacks.gr/proselavan-tychaia-voreiokoreates-chaker-kai-apokalyptoyn-pos-tryponoyn-sta-etairika-diktya/

#Cybersecurity #NorthKorea #LazarusGroup #InsiderThreat #IdentityFraud

Lazarus Group exploits Windows zero-day to breach EU defense firms. Patch now!
#ZeroDay #LazarusGroup #PatchNow

📢 Lazarus Group exploite un zero-day Windows (CVE-2026-68820) via de fausses offres d'emploi

Cet article documente une nouvelle vague de la campagne Operation Dream Job, attribuée au groupe nord-coréen Lazarus, ciblant les secteurs de la défense, de l'aérospatiale et de l'aviation en Europe, Asie et Amérique du Sud.

📖 cyberveille : https://cyberveille.ch/posts/2026-08-13-lazarus-group-exploite-un-zero-day-windows-cve-2026-68820-via-de-fausses-offres-d-emploi/
🌐 source : https://blog.checkpoint.com/research/state-sponsored-hackers-use-fake-job-offers-to-deliver-new-zero-day-exploit/
🟢 vérification factuelle haute
#LazarusGroup #ZeroDay #Cyberveille

North Korea Hacked Defense Firms Four Times via Same Windows Driver; Patch Now

This photograph taken on January 20, 2026 shows a sign of US technology conglomerate Microsoft displayed during the…
#EuropeSays #Korea #KR #NorthKorea #CVE-2026-68820 #FudModulerootkit #LazarusGroup #Microsoftsecurityupdate #NorthKoreacyberattack #OperationDreamJob #PatchTuesdayAugust2026 #Windowszero-day
https://www.europesays.com/korea/117308/

Lazarus Group is exploiting a Windows zero-day (CVE-2026-68820) to escalate to SYSTEM privileges and deploy backdoors. Targets include defense and aerospace firms in France, Germany, Brazil, and India, lured through fake LinkedIn job offers under Operation Dream Job.

#LazarusGroup #ZeroDayExploit #WindowsSecurity #OperationDreamJob

https://cyberworldops.eu/en/lazarus-exploits-a-windows-zero-day-to-gain-system-privileges

Lazarus Group is exploiting a Windows zero-day (CVE-2026-68820) to escalate to SYSTEM privileges and deploy backdoors. Targets include defense and aerospace firms in France, Germany, Brazil, and India, lured through fake LinkedIn job offers under Operation Dream Job.

#LazarusGroup #ZeroDayExploit #WindowsSecurity #OperationDreamJob

https://cyberworldops.eu/en/lazarus-exploits-a-windows-zero-day-to-gain-system-privileges

Lazarus Group exploits Windows zero-day (CVE-2026-68820) to deploy backdoors in defense and aerospace sectors. Organizations should bolster security protocols to mitigate these advanced threats.

#CyberSecurity #LazarusGroup #WindowsZeroDay #DefenseSector #Aerospace #APT #InfoSec

https://thedailytechfeed.com/lazarus-group-exploits-windows-zero-day-to-deploy-new-backdoor/

Lazarus Group has been exploiting a Windows zero-day as part of its ongoing Operation Dream Job campaign. The attackers pose as recruiters on professional platforms to target defense and aerospace organizations across France, Germany, Brazil, and India.

#LazarusGroup #ZeroDay #OperationDreamJob #APTThreats

https://cyberworldops.eu/en/lazarus-exploits-a-windows-zero-day-in-a-fake-job-offer-campaign

Lazarus Group has been exploiting a Windows zero-day as part of its ongoing Operation Dream Job campaign. The attackers pose as recruiters on professional platforms to target defense and aerospace organizations across France, Germany, Brazil, and India.

#LazarusGroup #ZeroDay #OperationDreamJob #APTThreats

https://cyberworldops.eu/en/lazarus-exploits-a-windows-zero-day-in-a-fake-job-offer-campaign

Anybody has Xctdoor/Xctloader samples that can share? I was trying to get the samples from this AhnLabs blog https://asec.ahnlab.com/en/94847/ alas, they are not in VirusTotal or Malware Bazaar...

More than anything, I'm interested in samples employing these basic "obfuscation" techniques:

#malware #xctdoor #xctloader #lazarus #lazarusgroup

Anybody has Xctdoor/Xctloader samples that can share? I was trying to get the samples from this AhnLabs blog https://asec.ahnlab.com/en/94847/ alas, they are not in VirusTotal or Malware Bazaar...

More than anything, I'm interested in samples employing these basic "obfuscation" techniques:

#malware #xctdoor #xctloader #lazarus #lazarusgroup

Anybody has Xctdoor/Xctloader samples that can share? I was trying to get the samples from this AhnLabs blog https://asec.ahnlab.com/en/94847/ alas, they are not in VirusTotal or Malware Bazaar...

More than anything, I'm interested in samples employing these basic "obfuscation" techniques:

#malware #xctdoor #xctloader #lazarus #lazarusgroup

Anybody has Xctdoor/Xctloader samples that can share? I was trying to get the samples from this AhnLabs blog https://asec.ahnlab.com/en/94847/ alas, they are not in VirusTotal or Malware Bazaar...

More than anything, I'm interested in samples employing these basic "obfuscation" techniques:

#malware #xctdoor #xctloader #lazarus #lazarusgroup

Anybody has Xctdoor/Xctloader samples that can share? I was trying to get the samples from this AhnLabs blog https://asec.ahnlab.com/en/94847/ alas, they are not in VirusTotal or Malware Bazaar...

More than anything, I'm interested in samples employing these basic "obfuscation" techniques:

#malware #xctdoor #xctloader #lazarus #lazarusgroup

Bybit Sues North Korea in U.S. Over $1.5 Billion Hack — Pursues Legal Action to Trace Assets — BigGo Finance

Bybit, a major cryptocurrency exchange, announced on August 7, 2026, that it has filed a civil lawsuit in…
#EuropeSays #Korea #KR #NorthKorea #BenZhou #Bybit #Chainalysis #Ethereum(ETH) #FBI #LazarusGroup #ReconnaissanceGeneralBureau(RGB) #TraderTraitor #U.S.DistrictCourtfortheDistrictofColumbia
https://www.europesays.com/korea/114145/

North Korea’s APT Capabilities Are No Longer State-Exclusive https://www.byteseu.com/2244942/ #Conflicts #CryptocurrencyLaundering #GunraRansomware #LazarusGroup #NorthKorea #NorthKoreanHackers #OperationDoubleBarrel #SouthKoreanFinancialSoftware

North Korea’s APT Capabilities Are No Longer State-Exclusive

Cyberwarfare / Nation-State Attacks , Fraud Management & Cybercrime , Ransomware AhnLab Found Shared Malware, SSH Keys and…
#EuropeSays #Korea #KR #NorthKorea #cryptocurrencylaundering #Gunraransomware #LazarusGroup #NorthKoreanhackers #OperationDoubleBarrel #SouthKoreanfinancialsoftware
https://www.europesays.com/korea/105893/

Operation Double Barrel: quando lo spionaggio di stato nordcoreano condivide l’infrastruttura con il ransomware Gunra

https://insicurezzadigitale.com/operation-double-barrel-quando-lo-spionaggio-di-stato-nordcoreano-condivide-linfrastruttura-con-il-ransomware-gunra/

Operation Double Barrel: quando lo spionaggio di stato nordcoreano condivide l’infrastruttura con il ransomware Gunra

https://insicurezzadigitale.com/operation-double-barrel-quando-lo-spionaggio-di-stato-nordcoreano-condivide-linfrastruttura-con-il-ransomware-gunra/

Operation Double Barrel: quando lo spionaggio di stato nordcoreano condivide l’infrastruttura con il ransomware Gunra

https://insicurezzadigitale.com/operation-double-barrel-quando-lo-spionaggio-di-stato-nordcoreano-condivide-linfrastruttura-con-il-ransomware-gunra/

Operation Double Barrel: quando lo spionaggio di stato nordcoreano condivide l’infrastruttura con il ransomware Gunra

https://insicurezzadigitale.com/operation-double-barrel-quando-lo-spionaggio-di-stato-nordcoreano-condivide-linfrastruttura-con-il-ransomware-gunra/

Operation Double Barrel: quando lo spionaggio di stato nordcoreano condivide l’infrastruttura con il ransomware Gunra

https://insicurezzadigitale.com/operation-double-barrel-quando-lo-spionaggio-di-stato-nordcoreano-condivide-linfrastruttura-con-il-ransomware-gunra/

Your quest, which you've already failed before accepting it, is to monitor threat intelligence feeds and endpoint security logs for indicators of Lazarus Group tool usage. The expansion pack is already installed. The final boss brought friends.

Reward: You've received the Borrowed Doom Blade — pre-owned by a nation-state, gifted to strangers, definitely in your inventory now.

#Ransomware #LazarusGroup #NorthKorea #CyberSecurity #APT #ThreatActorTeamUp (2/2)

Your quest, which you've already failed before accepting it, is to monitor threat intelligence feeds and endpoint security logs for indicators of Lazarus Group tool usage. The expansion pack is already installed. The final boss brought friends.

Reward: You've received the Borrowed Doom Blade — pre-owned by a nation-state, gifted to strangers, definitely in your inventory now.

#Ransomware #LazarusGroup #NorthKorea #CyberSecurity #APT #ThreatActorTeamUp (2/2)

Crypto Hacks Hit All-Time High as North Korea Drains Over $600M and AI Agents Become New Target

Cryptocurrency projects recorded more verified hacks in the first six months of 2026 than in any previous full…
#EuropeSays #Korea #KR #NorthKorea #AIagentexploit #Blockaid #Blockchainsecurity #cryptohack2026 #cryptocurrency #DeFisecurity #LazarusGroup
https://www.europesays.com/korea/103009/

CLARITY Act Is Secret to Killing North Korean Lazarus Hacker Group, Says Lummis

Senator Cynthia Lummis has put national security at the center of her push for the Digital Asset Market…
#EuropeSays #Korea #KR #NorthKorea #BankSecrecyAct #ClarityAct #complianceobligations #CynthiaLummis #LazarusGroup #Section201 #suspicioustransactions
https://www.europesays.com/korea/100506/

Cynthia Lummis Says Crypto Act Will Strengthen Sanctions Compliance Against North Korea-Based Hackers and Other Bad Actors

Sen. Cynthia Lummis (R-Wyo.) said on Sunday that the Clarity Act would close financial regulatory gaps that allowed North Korea’s Lazarus…
#EuropeSays #Korea #KR #NorthKorea #ClarityAct #CynthiaLummis #LazarusGroup #suspicioustransactions #Treasury
https://www.europesays.com/korea/100472/

Cynthia Lummis Says Crypto Act Will Strengthen Sanctions Compliance Against North Korea-Based Hackers and Other Bad Actors

Sen. Cynthia Lummis (R-Wyo.) said on Sunday that the Clarity Act would close financial regulatory gaps that allowed North Korea’s Lazarus…
#EuropeSays #Korea #KR #NorthKorea #ClarityAct #CynthiaLummis #LazarusGroup #suspicioustransactions #Treasury
https://www.europesays.com/korea/100430/

Russia, Iran, North Korea moved $104 billion in crypto to bypass sanctions

Russia, Iran and North Korea are increasingly relying on cryptocurrencies to keep money moving despite sweeping Western sanctions,…
#EuropeSays #Korea #KR #NorthKorea #blockchainsanctions #Bybithack #Chainalysisreport #cryptocurrencysanctionsevasion #illicitcryptotransactions #IranIRGCcrypto #LazarusGroup #NorthKoreacryptotheft #RussiastablecoinA7A5
https://www.europesays.com/korea/84884/

Russia, Iran, North Korea moved $104 billion in crypto to bypass sanctions

Russia, Iran and North Korea are increasingly relying on cryptocurrencies to keep money moving despite sweeping Western sanctions,…
#Conflict #Conflicts #War #blockchainsanctions #bybithack #Chainalysisreport #cryptocurrencysanctionsevasion #illicitcryptotransactions #IranIRGCcrypto #LazarusGroup #northkorea #NorthKoreacryptotheft #RussiastablecoinA7A5
https://www.europesays.com/3128020/

Lazarus nasconde un RAT completo in sei pacchetti npm mascherati da polyfill Rollup

https://insicurezzadigitale.com/lazarus-nasconde-un-rat-completo-in-sei-pacchetti-npm-mascherati-da-polyfill-rollup/

Lazarus nasconde un RAT completo in sei pacchetti npm mascherati da polyfill Rollup

https://insicurezzadigitale.com/lazarus-nasconde-un-rat-completo-in-sei-pacchetti-npm-mascherati-da-polyfill-rollup/

Lazarus nasconde un RAT completo in sei pacchetti npm mascherati da polyfill Rollup

https://insicurezzadigitale.com/lazarus-nasconde-un-rat-completo-in-sei-pacchetti-npm-mascherati-da-polyfill-rollup/

Lazarus nasconde un RAT completo in sei pacchetti npm mascherati da polyfill Rollup

https://insicurezzadigitale.com/lazarus-nasconde-un-rat-completo-in-sei-pacchetti-npm-mascherati-da-polyfill-rollup/

Lazarus nasconde un RAT completo in sei pacchetti npm mascherati da polyfill Rollup

https://insicurezzadigitale.com/lazarus-nasconde-un-rat-completo-in-sei-pacchetti-npm-mascherati-da-polyfill-rollup/

North Korea behind two-thirds of crypto theft in H1 2026, report says

SEOUL, July 3 (UPI) — North Korean-linked hackers stole roughly $643 million in cryptocurrency during the first half…
#EuropeSays #Korea #KR #NorthKorea #cryptocurrency #LazarusGroup #NorthKorean #TRMLabs
https://www.europesays.com/korea/73341/

📰 Lazarus Group Unleashes 'RemotePE' Memory-Only RAT in Attacks on Financial and Crypto Firms

🇰🇵 Lazarus Group deploys new 'RemotePE' memory-only RAT against financial & crypto firms. The fileless malware evades detection by never touching the disk, using a multi-stage infection chain. #LazarusGroup #Malware #ThreatIntel #RemotePE

🌐 cyber[.]netsecops[.]io

🔗 https://cyber.netsecops.io/articles/lazarus-group-deploys-memory-only-rat-remotepe-in-financial-attacks/?utm…

📰 Lazarus Group Unleashes 'RemotePE' Memory-Only RAT in Attacks on Financial and Crypto Firms

🇰🇵 Lazarus Group deploys new 'RemotePE' memory-only RAT against financial & crypto firms. The fileless malware evades detection by never touching the disk, using a multi-stage infection chain. #LazarusGroup #Malware #ThreatIntel #RemotePE

🌐 cyber[.]netsecops[.]io

🔗 https://cyber.netsecops.io/articles/lazarus-group-deploys-memory-only-rat-remotepe-in-financial-attacks/?utm…

Lazarus Group Deploys Memory-Only RAT in Financial Sector Attacks

The notorious Lazarus Group has unleashed a sneaky new attack tool, a memory-only Remote Access Trojan (RAT), targeting the financial sector with cunning precision. This stealthy malware, known as RemotePE, is just the latest weapon in the group's arsenal, and it's being used to infiltrate and manipulate its victims.

https://osintsights.com/lazarus-group-deploys-memory-only-rat-in-financial-sector-attacks?utm_source=mastodon&utm_medium=social

#LazarusGroup #RemoteAccessTrojan #Rat #FinancialSector #DecentralizedFinance

North Korea-Linked Crypto Theft Hits $2B After 51% Surge in 2025

The ‘Total Crypto Hack Value in 2026’ market currently shows a 70% YES chance for losses exceeding $1.2…
#Conflict #Conflicts #War #cryptohacks #cryptosecurity #cryptotheft #LazarusGroup #northkorea #NorthKoreanhackers
https://www.europesays.com/2995487/

Banking Trojan Targets Crypto Firms with Sophisticated Attacks

A new banking Trojan, dubbed TCLBanker, is wreaking havoc on crypto and finance platforms, allowing hackers to remotely control infected systems and steal sensitive info. This sophisticated attack, linked to North Korea's notorious Lazarus Group, has already led to the largest crypto platform hack of 2026.

https://osintsights.com/banking-trojan-targets-crypto-firms-with-sophisticated-attacks?utm_source=mastodon&utm_medium=social

#Tclbanker #BankingTrojan #LazarusGroup #NorthKorea #CryptoFirms

La Corea del Nord ha rubato il 76% di tutte le criptovalute hackerate nel 2026: due attacchi, $577 milioni, e una macchina da guerra finanziata dal cyber

https://insicurezzadigitale.com/la-corea-del-nord-ha-rubato-il-76-di-tutte-le-criptovalute-hackerate-nel-2026-due-attacchi-577-milioni-e-una-macchina-da-guerra-finanziata-dal-cyber/

La Corea del Nord ha rubato il 76% di tutte le criptovalute hackerate nel 2026: due attacchi, $577 milioni, e una macchina da guerra finanziata dal cyber

https://insicurezzadigitale.com/la-corea-del-nord-ha-rubato-il-76-di-tutte-le-criptovalute-hackerate-nel-2026-due-attacchi-577-milioni-e-una-macchina-da-guerra-finanziata-dal-cyber/

La Corea del Nord ha rubato il 76% di tutte le criptovalute hackerate nel 2026: due attacchi, $577 milioni, e una macchina da guerra finanziata dal cyber

https://insicurezzadigitale.com/la-corea-del-nord-ha-rubato-il-76-di-tutte-le-criptovalute-hackerate-nel-2026-due-attacchi-577-milioni-e-una-macchina-da-guerra-finanziata-dal-cyber/

La Corea del Nord ha rubato il 76% di tutte le criptovalute hackerate nel 2026: due attacchi, $577 milioni, e una macchina da guerra finanziata dal cyber

https://insicurezzadigitale.com/la-corea-del-nord-ha-rubato-il-76-di-tutte-le-criptovalute-hackerate-nel-2026-due-attacchi-577-milioni-e-una-macchina-da-guerra-finanziata-dal-cyber/

La Corea del Nord ha rubato il 76% di tutte le criptovalute hackerate nel 2026: due attacchi, $577 milioni, e una macchina da guerra finanziata dal cyber

https://insicurezzadigitale.com/la-corea-del-nord-ha-rubato-il-76-di-tutte-le-criptovalute-hackerate-nel-2026-due-attacchi-577-milioni-e-una-macchina-da-guerra-finanziata-dal-cyber/

i suspect #northkorea has figured out how to use AI for #cybersecurity purposes

#crypto #DPRK #infosec #threatintel #cryptocurrency #lazarusGroup #defi

i suspect #northkorea has figured out how to use AI for #cybersecurity purposes

#crypto #DPRK #infosec #threatintel #cryptocurrency #lazarusGroup #defi

i suspect #northkorea has figured out how to use AI for #cybersecurity purposes

#crypto #DPRK #infosec #threatintel #cryptocurrency #lazarusGroup #defi

i suspect #northkorea has figured out how to use AI for #cybersecurity purposes

#crypto #DPRK #infosec #threatintel #cryptocurrency #lazarusGroup #defi

i suspect #northkorea has figured out how to use AI for #cybersecurity purposes

#crypto #DPRK #infosec #threatintel #cryptocurrency #lazarusGroup #defi

in the future of finance your parents' retirement savings will be able to go directly to #northkorea instead of having to make pitstops in #cambodia and #palau
https://x.com/0x_Abdul/status/2049830893209190681

#crypto #defi #cryptocurrency #bitcoin #solana #ethereum #corruption #DPRK #LazarusGroup #infosec #cybersecurity #threatintel #economics #sanctions #futureoffinance

in the future of finance your parents' retirement savings will be able to go directly to #northkorea instead of having to make pitstops in #cambodia and #palau
https://x.com/0x_Abdul/status/2049830893209190681

#crypto #defi #cryptocurrency #bitcoin #solana #ethereum #corruption #DPRK #LazarusGroup #infosec #cybersecurity #threatintel #economics #sanctions #futureoffinance

in the future of finance your parents' retirement savings will be able to go directly to #northkorea instead of having to make pitstops in #cambodia and #palau
https://x.com/0x_Abdul/status/2049830893209190681

#crypto #defi #cryptocurrency #bitcoin #solana #ethereum #corruption #DPRK #LazarusGroup #infosec #cybersecurity #threatintel #economics #sanctions #futureoffinance

in the future of finance your parents' retirement savings will be able to go directly to #northkorea instead of having to make pitstops in #cambodia and #palau
https://x.com/0x_Abdul/status/2049830893209190681

#crypto #defi #cryptocurrency #bitcoin #solana #ethereum #corruption #DPRK #LazarusGroup #infosec #cybersecurity #threatintel #economics #sanctions #futureoffinance

in the future of finance your parents' retirement savings will be able to go directly to #northkorea instead of having to make pitstops in #cambodia and #palau
https://x.com/0x_Abdul/status/2049830893209190681

#crypto #defi #cryptocurrency #bitcoin #solana #ethereum #corruption #DPRK #LazarusGroup #infosec #cybersecurity #threatintel #economics #sanctions #futureoffinance

BlueNoroff e le riunioni Zoom fasulle: come la Corea del Nord usa l’IA e i deepfake per svuotare i portafogli crypto dei CEO

https://insicurezzadigitale.com/bluenoroff-e-le-riunioni-zoom-fasulle-come-la-corea-del-nord-usa-lia-e-i-deepfake-per-svuotare-i-portafogli-crypto-dei-ceo/

BlueNoroff e le riunioni Zoom fasulle: come la Corea del Nord usa l’IA e i deepfake per svuotare i portafogli crypto dei CEO

https://insicurezzadigitale.com/bluenoroff-e-le-riunioni-zoom-fasulle-come-la-corea-del-nord-usa-lia-e-i-deepfake-per-svuotare-i-portafogli-crypto-dei-ceo/