North Korean hackers hit Microsoft servers with ‘reconnaissance’ malware: Report
Cybersecurity firm says Lazarus Group targeted ‘poorly managed’ devices in possible effort to steal system credentials
SHARE
COPY LINK
X
MASTODON
North Korean hackers targeted vulnerable Microsoft web infrastructure with malicious software using a similar technique attackers used to gain access to cryptocurrency firms, a South Korean security firm says in a new report.
AhnLab Security Emergency Response Center (ASEC) states that the attack targeted Microsoft Internet Information Services (IIS) servers and relied on a technique known as Dynamic Link Library (DLL) side-loading, involving the transfer of shared Microsoft libraries.
According to the report, the Lazarus Group attackers infiltrated the network by placing “a malicious DLL (msvcr100.dll) in the same folder path as a normal
