Anti-Forensic Techniques Used By Lazarus Group

Since approximately a year ago, the Lazarus group’s malware has been discovered in various Korean companies related to national defense, satellites, software, and media press. The AhnLab ASEC analysis team has been continuously tracking the Lazarus threat group’s activities and other related TTPs.

Among the recent cases, this post aims to share the anti-forensic traces and details found in the systems that were infiltrated by the Lazarus group.

Overview

Definition of Anti-Forensics

Anti-forensics refers to the tampering of evidence in …

ahnlab analysis asec cases companies defense definition forensic forensics lazarus lazarus group malware malware analysis media national national defense press satellites share software systems team techniques threat threat group traces tracking ttps