North Korean Hackers Distribute Trojanized CyberLink Software in Supply Chain Attack

A North Korean state-sponsored threat actor tracked as Diamond Sleet is distributing a trojanized version of a legitimate application developed by a Taiwanese multimedia software developer called CyberLink to target downstream customers via a supply chain attack.
"This malicious file is a legitimate CyberLink application installer that has been modified to include malicious code that downloads,

actor application attack called customers cyberlink developer diamond diamond sleet file hackers installer malicious north north korean north korean hackers sleet software software developer sponsored state state-sponsored threat actor supply supply chain supply chain attack target threat threat actor version