Lazarus APT Injects Malware into Trusted Packages to Gain Backdoor Access

A recent investigation by STRIKE, the cybersecurity division of SecurityScorecard, has uncovered a meticulously orchestrated cyber espionage campaign, dubbed “Operation Phantom Circuit,” spearheaded by North Korea’s Advanced Persistent Threat (APT) group, Lazarus. This operation, active between September 2024 and January 2025, leveraged advanced techniques to breach global cryptocurrency platforms and developer environments, affecting over 1,641 … Continue reading Lazarus APT Injects Malware into Trusted Packages to Gain Backdoor Access