Security· ★★★★· bearish·

CYFIRMA: North Korea's Lazarus preparing attacks on South Korean government and banks

  • —Targets include government agencies, banks and online trading platforms in Korea, US, Japan and EU
  • —Attackers exploit PHP2Shell to run code on web servers without authentication
  • —CYFIRMA rated the threat very high and urged immediate patching
  • —Lazarus could steal digital assets and account data if intrusions succeed
Why it matters: North Korea-linked theft of digital assets remains a persistent risk for exchanges and custodians, making server checks urgent for regional crypto firms and banks.
Source: Bloomingbit
More on this
Security · Oct 8
CrowdStrike: AI-assisted attacks hit South Korean banks via ARTEX tool
 Security · Sep 30
Bybit sues North Korea and Lazarus Group for $1.5B over 2025 hack
 Security · Oct 21
Lazarus uses AI and post-quantum crypto in Operation FlashHole attacks