Threat actorcritical
Lazarus APT steals cryptocurrency and user data via a decoy MOBA game
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-4947 | V8 Type Confusion in Google Chrome Actively Exploited by Lazarus Group | 9.6 | 15% | KEVPoC | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | detankzone.com | the Google Chrome web browser originating from the website detankzone[.]com. On the surface, this website resembled a professionally |
From the original article
14 min read at securelist.com
Lazarus APT and its BlueNoroff subgroup are a highly sophisticated and multifaceted Korean-speaking threat actor. We closely monitor their activities and quite often see them using their signature malware in their attacks — a full-feature backdoor called Manuscrypt.
By @Securelist · securelist.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.