Kaspersky Lab Uncovers Complex Lazarus Hacker Group Attacks on South Korean Companies

Specialists from "Kaspersky Lab" have uncovered complex targeted attacks conducted by the Lazarus hacker group against companies in South Korea. The hackers employed a combination of two main methods: first, they infected the victims' systems through legitimate news websites (watering hole tactic), and then exploited a vulnerability in the popular South Korean file transfer software Innorix Agent. This operation, dubbed Operation SyncHole, allowed the attackers to compromise the systems of the targeted companies.