ESET Research into new attacks by Lazarus – Week in security with Tony Anscombe

Cyber Security

The attack involved the first recorded abuse of a security vulnerability in a Dell driver that was patched in May 2021

This week, the ESET Research team has published the results of their analysis of recent attacks carried out by the Lazarus APT group. Using spear-phishing emails that contained malicious Amazon-themed documents, the group targeted an employee of an aerospace company in the Netherlands and a political journalist in Belgium. Notably, one of the tools used in the attack exploited the CVE‑2021‑21551 vulnerability in a Dell driver in what was the first recorded abuse of this security flaw.

Watch the video to learn more about the attack and about some of the precautions companies and employees can take against such well-resourced and organized groups. For more recommendations about defending against APT groups, head over to this video.

Products You May Like

Articles You May Like

Researchers Detail AppSync Cross-Tenant Vulnerability in Amazon Web Services
New Flaw in Acer Laptops Could Let Attackers Disable Secure Boot Protection
The CHRISTMA EXEC network worm – 35 years and counting!
‘Tis the Season for Holiday Scams
Serious Security: MD5 considered harmful – to the tune of $600,000

Leave a Reply

Your email address will not be published. Required fields are marked *