ESET Research into new attacks by Lazarus – Week in security with Tony Anscombe

Cyber Security

The attack involved the first recorded abuse of a security vulnerability in a Dell driver that was patched in May 2021

This week, the ESET Research team has published the results of their analysis of recent attacks carried out by the Lazarus APT group. Using spear-phishing emails that contained malicious Amazon-themed documents, the group targeted an employee of an aerospace company in the Netherlands and a political journalist in Belgium. Notably, one of the tools used in the attack exploited the CVE‑2021‑21551 vulnerability in a Dell driver in what was the first recorded abuse of this security flaw.

Watch the video to learn more about the attack and about some of the precautions companies and employees can take against such well-resourced and organized groups. For more recommendations about defending against APT groups, head over to this video.

Products You May Like

Articles You May Like

Phishing Campaign Impersonating UAE Ministry of Human Resources Grows
U.S. Bans Chinese Telecom Equipment and Surveillance Cameras Over National Security Risk
Remote Code Execution Vulnerability Found in Windows Internet Key Exchange
Serious Security: MD5 considered harmful – to the tune of $600,000
Apple pushes out iOS security update that’s more tight-lipped than ever

Leave a Reply

Your email address will not be published. Required fields are marked *