Kaspersky Uncovers Lazarus Operation FlashHole APT Campaign
At the Security Analyst Summit in Bali, Indonesia, Kaspersky’s Global Research and Analysis Team (GReAT) presented findings on Operation FlashHole, a cyberespionage campaign attributed to the Lazarus APT group. Active since at least July 2025, the campaign has already affected at least three organizations in South Korea across the construction, software and wire-communication equipment manufacturing sectors. The attackers used spear-phishing, abuse of legitimate CrossWeb EX software and deployed updated malware, including previously undocumented tools.
Kaspersky GReAT has uncovered a new wave of attacks linked to Lazarus’s Operation SyncHole, first discovered last year. The attackers have since evolved their tools and techniques, making the campaign more persistent and sophisticated.
As a part of the campaign, the researchers uncovered a GitHub Pages website linked to a GitHub account used as a command-and-control (C2) channel. Created in September 2025, the account initially hosted a website featuring the CV of a purported senior network-appliance...
Copyright of this story solely belongs to www.itvoice.in. To see the full text click HERE
