North Korean hackers deployed a new Linux espionage toolkit against South Korean automotive and media firms, using a HAProxy backdoor, trojanized tools, and a curl-based RAT for stealthy long-term surveillance. #NorthKorea #APT37 #Lazarus

"Beyond Lazarus: Organization of DPRK Cyber Capabilities" published by KudelskiSecurity. #APT38, #Andariel, #Kimsuky, #CryptoCore, #TEMPHermit, #JadeSleet, #CitrineSleet, #ITWorker, #MoonstoneSleet, #Lazarus https://kudelskisecurity.com/research/beyond-lazarus-organization-of-dprk-cyber-capabilities