EC868CEBA78CEC82AC-EBB0A9EC82B0EC9785ECB2B4-EC9E85EC82ACECA09CEC95_VnVW61K.pdf (1 MB)

Somansa analyzed a Lazarus campaign that abused Windows Update-related services and lures aimed at defense-industry hiring or remote-work security guidance. The report says North Korean hackers commonly distribute malware by impersonating organizations, institutions, or topical documents, affecting both enterprise employees and ordinary users. In this case, the malware was disguised as a normal file, infected systems after execution, and enabled theft of financial data, sensitive information, personal certificates, and connection records from compromised PCs.