The North Korea-linked Lazarus Group is likely behind a novel supply chain attack targeting a popular South Korean security software manager, according to researchers at cybersecurity firm ESET.

On Monday, ESET warned that WIZVERA VeraPort, a widespread application that assists with installing custom security software, was compromised by Lazarus hackers.

The attack needs to meet at least three preconditions involving VeraPort in order to work, which means that its scope is rather limited. However, it shows creativity and a deep understanding of South Korean internet services that makes it “strongly” attributable to Lazarus, the cybersecurity firm’s report alleges.

The hackers