18 Hrs
Source:
بوابة الفجر
LAZARUS APT group launches AI-based campaign
Kasperksy's security team investigations reveal that the cyber espionage campaign (Operation FlashHole), attributed to the Lazarus group, began in July 2025. The campaign targeted at least three South Korean organizations in the construction, software, and communications equipment manufacturing sectors. The attackers employed advanced techniques, including spear phishing through tailored email messages and fake links customized for each target, along with exploiting a potential security vulnerability in the CrossWeb EX software. They also utilized updated malicious tools such as TouchHub and ClientHub to conceal their activities and spy on victims. Additionally, the attackers used sophisticated encryption methods to counter future quantum attacks, relying on modern encryption technologies since September 2024. This reflects an expansion in their operational scope and techniques, aimed at enhancing their resilience against advanced security threats. Experts recommend strict security measures, including software updates, restricted user access, deployment of advanced protection solutions, and managed security services to combat these evolving threats.
Size: 120%Text Size
Notice: This Is an AI-Generated Summary
Comments (0)