eset-apt-activity-report-q2-2023-q3-2023.pdf (5 MB)

The most active Lazarus scheme observed was Operation DreamJob, luring targets with fake job offers for lucrative positions. North Korea-aligned groups continued to focus on Japan, South Korea, and South Korea-focused entities, employing carefully crafted spearphishing emails. In the monitored timespan, we observed a notable strategy of APT groups utilizing the exploitation of known vulnerabilities to exfiltrate data from governmental entities or related organizations. This group consistently demonstrated its capability to create malware for all major desktop platforms.