News North Korean hackers hit Microsoft servers with ‘reconnaissance’ malware: ReportCybersecurity firm says Lazarus Group targeted ‘poorly managed’ devices in possible effort to steal system credentials North Korean hackers targeted vulnerable Microsoft web infrastructure with malicious software using a similar technique attackers used to gain access to cryptocurrency firms, a South Korean security firm says in a new report. AhnLab Security Emergency Response Center (ASEC) states that the attack targeted Microsoft Internet Information Services (IIS) servers and relied on a technique known as Dynamic Link Library (DLL) side-loading, involving the transfer of shared Microsoft libraries. According to the report, the Lazarus Group attackers infiltrated the network by placing “a malicious DLL (msvcr100.dll) in the same folder path as a normal © Korea Risk Group. All rights reserved. |