The attack involved the first recorded abuse of a security vulnerability in a Dell driver that was patched in May 2021
This week, the ESET Research team has published the results of their analysis of recent attacks carried out by the Lazarus APT group. Using spear-phishing emails that contained malicious Amazon-themed documents, the group targeted an employee of an aerospace company in the Netherlands and a political journalist in Belgium. Notably, one of the tools used in the attack exploited the CVE‑2021‑21551 vulnerability in a Dell driver in what was the first recorded abuse of this security flaw.
Watch the video to learn more about the attack and about some of the precautions companies and employees can take against such well-resourced and organized groups. For more recommendations about defending against APT groups, head over to this video.