Crypto Firms Beware: New Lazarus Malware Can Now Bypass Detection

THE malware payload “Can without light” — used In fake job scams — East far more difficult has detect that It is predecessor, warns cyber security researchers has ESET.

News Join We on social networks

North Korean piracy collective Lazarus Band has has been using A new type of "sophisticated" malware as part of It is fake job scams — which researchers warn East far more difficult has detect that It is predecessor.

According to has A Seven. 29 job Since ESET senior malware searcher Rock Kalnai, while Analyzing A recent fake job attack against A Based in Spain aerospace farm, ESET researchers discovered A publicly illegal immigrant back door appointed Can without light.

#ESET researchers revealed their results about A attack by THE North Related to Korea #APT band #Lazarus that took aim has A aerospace business In Spain.

▶️ Find out more In A #SafetyWeek video with @TonyAtESET. pic.twitter.com/M94J200VQx

— ESET (@ESET) September 29, 2023

THE Lazarus Groups fake job scam typically implied deception victims with A potential offer of job has A well known farm. THE attackers would be attract victims has download A malicious payload mask as documents has TO DO all kinds of too bad.

However, Kalnai said THE new LightlessCan payload East A "significant advancement" compared with has It is predecessor BlindingCan.

“LightlessCan imitates THE features of A wide range of native the Windows orders, allow discreet execution In THE RAT himself instead of noisy console executions. »

...