Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor
Lazarus exploits Windows AFD.sys zero-day CVE-2026-68820 in Operation Dream Job to deploy Troy backdoor at defense firms.
78
Malware
MISTPEN
- Mentions · 7d0
- Mentions · 30d0
- All mentions3
- First seenAug 12, 2026
- Last mentionedAug 15, 2026
Timeline
3 articles · newest firstNorth Korean Lazarus Group Uses Windows Zero
Check Point links Lazarus Group's Operation Dream Job to a new Windows zero-day, CVE-2026-68820, targeting defense workers with fake Lockheed Martin job offers.
84
Lazarus hackers pair fake job offers with Windows zero-day exploit
Lazarus' Operation Dream Job targets the defense sector with fake job offers, a Windows LPE zero-day (CVE-2026-68820), and new Troy and RelayShell backdoors.
82
Related CVEs
by mentions- CVE-2025-4911399%8.8Authenticated PHP Object Deserialization RCE in Roundcube Webmail
- CVE-2026-68820<1%7.0Use-After-Free Local Privilege Escalation in Microsoft Windows WinSock AFD Driver
Appears with
- RelayShellmalware · 3
- Check Pointvendor · 3
- Troymalware · 3
- Windowsproduct · 3
- Microsoftvendor · 3
- FudModulemalware · 2
- Lockheed Martinorganization · 2
- Troyproduct · 2
- ForestTigermalware · 2
- Lockheed Martinvendor · 2
- FudModuleproduct · 2
- Enveilvendor · 2
- SecurityPDFproduct · 2
- RelayShellproduct · 2
- Enveilorganization · 2
- Lazarus Groupthreat actor · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.