Stay updated with breaking news from Microsoft Threat Intelligence. Get real-time updates on events, politics, business, and more. Visit us for reliable news and exclusive interviews.
According to a series of posts on X by Microsoft Threat Intelligence, Russia-based ransomware actor Storm-0216 (aka Twisted Spider, UNC2198) is using Danabot, an advanced banking Trojan, to deploy Cactus ransomware.
North Korea's Lazarus Group, also known as Diamond Sleet, has been leveraging a trojanized CyberLink app installer to facilitate the distribution of LambLoad malware in a new supply chain attack, according to SiliconAngle.
CyberLink targeted in supply chain attack by infamous Lazarus hacking group - SiliconANGLE
North Korean hackers, aka Diamond Sleet, spread a trojanized version of CyberLink's legit app.
A supply chain attack originating in North Korea and Trojanized in an application installer from CyberLink has overtones of a James Bond film.