Lazarus Group Hacks South Korean Financial Entity via Zero-Day Vulnerability

Over the past year, the Lazarus Group has used flaws in an undisclosed software to breach a financial business entity in South Korea on two distinct occasions. As opposed to the first attack in May 2022, the re-infiltration in October 2022 exploited a zero-day vulnerability in the same certificate software widely used by public institutions and […]

The post Lazarus Group Hacks South Korean Financial Entity via Zero-Day Vulnerability appeared first on Heimdal Security Blog.

attack breach business certificate cybersecurity news exploited financial flaws hacks institutions korea lazarus lazarus group may may 2022 october public software south south korea vulnerability zero-day zero-day vulnerability