Lazarus Threat Group Exploiting Vulnerability of Korean Finance Security Solution

As covered before here on the ASEC Blog, the Lazarus threat group exploits the vulnerabilities of INISAFE CrossWeb EX and MagicLine4NX in their attacks.

• New Malware of Lazarus Threat Actor Group Exploiting INITECH Process (Apr 26, 2022)


• A Case of Malware Infection by the Lazarus Attack Group Disabling Anti-Malware Programs With the BYOVD Technique (Oct 31, 2022)

While monitoring the activities of the Lazarus threat group, AhnLab Security Emergency response Center (ASEC) recently discovered that the zero-day vulnerability of VestCert …

actor anti-malware asec attack attacks blog case exploiting exploits finance infection inisafe lazarus malware malware analysis malware infection process security solution threat threat actor threat group vulnerabilities vulnerability