North Korean-linked Lazarus Group tied to supply chain attack on JumpCloud

Further research after Colorado-based JumpCloud invalidated its API keys two weeks ago led to indicators of compromise linked to North Korea.

api api keys attack cloud security colorado compromise indicators of compromise jumpcloud keys korea lazarus lazarus group led north north korea north korean research supply supply chain supply chain attack third party risk threat intelligence