How Lazarus impersonated Meta to attack a target in Spain – Week in security with Tony Anscombe

This week, #ESET researchers unveiled their findings about an attack by the North Korea-linked APT group Lazarus that took aim at an aerospace company in Spain. The group obtained initial access to the company’s network after a successful spearphishing campaign where they masqueraded as a recruiter for Meta, the company behind Facebook, Instagram, and WhatsApp, and contacted the victim via LinkedIn Messaging. During the attack, the group deployed several tools, most notably a newly-discovered sophisticated backdoor that ESET named LightlessCan. …

access aerospace aim apt attack campaign eset findings initial access korea lazarus meta network north north korea researchers security spain spearphishing target the company week week in security