Lazarus APT Uses Windows Update to Spew Malware

The group once again dangled fake job opportunities at engineers in a spear-phishing campaign that used Windows Update as a living-off-the-land technique and GitHub as a C2.

apt hacks large lazarus lazarus apt malware medium thumbnail update web security windows windows update