ESET attributed attacks against a Central American online casino to Lazarus, citing overlapping toolsets, telemetry, Lazarus-linked malware, and shared static characteristics. The intrusions used service-oriented NukeSped backdoors, session hijacking, credential theft tools including modified Mimikatz, remote access tooling, and Win32/KillDisk.NBO destructive payloads deployed across more than 100 casino systems, likely serving cover-up, extortion, or sabotage objectives.