X XFediYour place in the Fediverse
XFEDI

Remote profile

ActivityPub
Profile banner

lazarusholic

@[email protected]

a big fan of lazarus. You can find me on http://t.me/lazarusholic , https://lazarus.day.

Open remote profile ↗
Posts

"Suspected DPRK Campaign staging PHP2Shell Targeting against Global PHP infrastructure" published by Cyfirma. #Lazarus, #PHP2Shell, #DPRK, #CTI https://www.cyfirma.com/research/cyfirma-threat-advisory-suspected-dprk-campaign-staging-php2shell-targeting-against-global-php-infrastructure

CYFIRMACYFIRMA Threat Advisory: Suspected DPRK Campaign staging PHP2Shell Targeting against Global PHP infrastructure - CYFIRMA[June 2026 Minjun] – Suspected DPRK PHP2Shell Campaign Korean-speaking operators plan sector-targeted exploitation of CVE-2026-109618 and CVE-2026-109619 (CVSS v4.0 9.2,...
↩ Reply ♡ 0 · ↻ 0 ↗ Original

"Hunting Kimsuky: Multi-Language LNK Lures Delivering Persistent Backdoors" published by NextronSystems. #Kimsuky, #LNK https://github.com/NextronSystems/iocs/tree/master/reports/Hunting%20Kimsuky:%20Multi-Language%20LNK%20Lures%20Delivering%20Persistent%20Backdoors

GitHubiocs/reports/Hunting Kimsuky: Multi-Language LNK Lures Delivering Persistent Backdoors at master · NextronSystems/iocsIndicators of compromise from to analysis and research by Nextron Threat Research team - NextronSystems/iocs
↩ Reply ♡ 0 · ↻ 0 ↗ Original

"Operation FlashHole: Lazarus breaks security, defies control" published by Kaspersky. #CrossWebEX, #LPEClient, #Lazarus, #TOUCHSHIFT, #FlashHole, #Cubridge, #TechHub, #TouchHub, #ClientHub https://securelist.com/lazarus-operation-flashhole/121541

SecurelistDissecting Operation FlashHole, a complex attack by LazarusKaspersky researchers analyze Operation FlashHole – a recent complex attack by Lazarus, involving a sophisticated malware set, watering-hole technique and abuse of CrossWeb EX financial security software.
↩ Reply ♡ 0 · ↻ 0 ↗ Original