Lazarus Group Exploits Windows Zero-Day to Deploy Undocumented Backdoor in Cyber Espionage Campaign

The North Korean threat group Lazarus exploited a newly patched Windows zero-day vulnerability to gain SYSTEM-level access and deploy a previously undocumented backdoor. The campaign, linked to Operation Dream Job, targeted defense and aerospace sectors in France, Germany, Brazil, and India. Check Point Research attributed the activity to Lazarus but did not specify the exact CVE identifier or patch date for the exploited flaw. The attack involved cyber espionage tactics, though no additional technical details about the backdoor or infection vector were provided. No specific timeline or victim count was disclosed in the reported findings.