North Korea’s Lazarus Group Turns to Supply Chain Attacks | Dark Reading

The notorious Lazarus Group of North Korea’s recent action gives new evidence of threat actors’ increased interest in leveraging trusted IT supply chain providers as access points to company networks. Kaspersky Lab security experts recently found two different campaigns in which the Lazarus Group compromised an IT firm’s network — most likely as part of a larger scheme to corrupt the company’s downstream clients. The Lazarus Group, which was behind the WannaCry ransomware attack and a slew of other destructive campaigns, is one of a rising number of threat actors building skills to target businesses by exploiting vulnerabilities in the IT supply chain. 

Source: https://www.darkreading.com/threat-intelligence/north-korea-s-lazarus-group-turns-to-supply-chain-attacks