This North Korean recruitment scam was so convincing it even fooled Google
- Lazarus expanded Dream Job with a zero‑day, new backdoor, and advanced relays
- Fake job lures, trojanized PDFs, and spoofed sites enabled high‑level compromises
- Targets included defense and aerospace firms, prompting stronger phishing awareness
Security experts from Check Point Research say they have uncovered a new wave of "Operation Dream Job" attacks, leveraging a previously undocumented backdoor, a brand new Windows zero-day vulnerability, and a never-before-seen webshell/relay.
Lazarus Group is a hacking collective on the payroll of the North Korean government. It is a state-sponsored threat actor known for targeting cryptocurrency developers and other professionals in the Web3 industry, stealing their tokens and using the money to fund the country’s weapons program and the wider state apparatus.
It is also known for running Operation Dream Job - a hacking campaign that’s been going on for years, and that lures victims with highly lucrative but bogus job opportunities.
What is Operation Dream...
Copyright of this story solely belongs to techradar.com. To see the full text click HERE
