Kaspersky analyzes the Operation FlashHole attack by the Lazarus group

Kaspersky researchers have conducted a detailed analysis of a recent and complex cyber operation named Operation FlashHole, attributed to the Lazarus group.

According to what emerged from the analysis, the attack is characterized by the use of an articulated set of malware and the use of the technique known as watering-hole. As part of this campaign, the attackers also abused the financial security software CrossWeb EX to bypass protection barriers and evade controls.