Lazarus Group Uses the DLL Side-Loading Technique (2)

Through the “Lazarus Group Uses the DLL Side-Loading Technique” [1] blog post, AhnLab SEcurity intelligence Center(ASEC) has previously covered how the Lazarus group used the DLL Side-Loading attack technique using normal applications in the initial compromise stage to achieve the next stage of their attack process. This blog post will cover the added DLL variants and their verification routine for the targets.

The Lazarus group is an APT group that targets Korean companies, institutions, think tanks, and others. On January …

ahnlab applications asec attack blog blog post center compromise dll dll side-loading intelligence lazarus lazarus group malware analysis next normal process security security intelligence stage