Malware attack techniques combined in new North Korean macOS intrusions

North Korea's Lazarus Group has leveraged the backdoored PDF reader app SwiftLoader used in the RustBucket campaign to facilitate the deployment of the KANDYKORN macOS malware in a bid to better evade detection, according to The Hacker News.

app attack attack techniques campaign deployment detection evade hacker kandykorn korea lazarus lazarus group macos macos malware malware malware attack north north korea north korean pdf pdf reader reader rustbucket techniques threat intelligence