OTX Threat: Dissection of Operation FlashHole, a complex attack by Lazarus

In January, Lazarus Group launched Operation FlashHole against South Korea, exploiting mandatory security software CrossWeb EX through watering hole strategies and targeted spear-phishing emails with fake portfolio and resume sites. The campaign began in July the previous year, targeting software, construction, and cable equipment manufacturing sectors. The attack chain combines old and new malwar Sectors: Technology, Construction, Manufacturing