Recent phishing attacks show DPRK cyber actors shifting away from Word documents after Microsoft nerfs feature
North Korean cyber actors have recently re-upped phishing attacks against job seekers in the tech industry, while also modifying their tactics in light of a recent update to Microsoft’s popular Office application suite, a cybersecurity researcher told NK Pro on Monday.
According to Hossein Jazi of Malwarebytes, the attacks appear to be part of an ongoing campaign by the infamous Lazarus group, which has used similar lures to nab hundreds of millions worth of cryptocurrencies from tech firms.
In the latest lure, Lazarus attackers distributed an executable file (.exe) disguised as a job ad