NCSC-TAD-2509-001
مستوى الخطورة: منخفضة
تصيد احتيالي
الرقم المرجعي: NCSC-TAD-2509-001CVSS 0
Lazarus Group LinkdIn Campaign
- نوع التهديد:
- غير متوفر
- مستوى المشاركة (TLP):
- CLEAR
- CVE:
- غير متوفر
نظرة عامة
An ongoing sophisticated recruiting scam campaign attributed to the Lazarus Group, leveraging fake LinkdIn job offers to target organizations.
The campaign involves impersonating legitimate recruiters to deliver documents that establish persistence and exfiltrate sensitive information.
إجراءات الحد من المخاطر والإجراءات الفورية
- 01
Educate users on social engineering and spear-phishing attacks.
- 02
Restrict macro execution and untrusted file types.
- 03
Monitor for unusual network activity and anomalous C2 communications.