Windows 0-Day Was Exploited By North Korea To Install Advanced Rootkit

North Korean hackers exploited a critical Windows vulnerability to deploy advanced malware, security researchers revealed. The zero-day flaw, patched by Microsoft last week, allowed attackers to gain system-level access and install a sophisticated rootkit called FudModule. Gen, the firm that discovered the attacks, identified the threat actors as Lazarus, a hacking group linked to North Korea. The exploit targeted individuals in cryptocurrency and aerospace industries, likely aiming to steal digital assets and infiltrate corporate networks. FudModule, first analyzed in 2022, stands out for its ability to operate deep within Windows, evading detection by security defenses. Earlier versions used vulnerable drivers for installation, while a newer variant exploited a bug in Windows' AppLocker service.

Re:"linked to North Korea"

[XXongo]

Everyone knows North Korea doesn't know how to hack and barely has computers.

Not sure maybe this was intended to be sarcastic? The truth is the opposite; North Korea has almost no sources of income except hacking, and so this is supported at the highest level of government

It's obviously some country, likely their neighbors China or Russia, that VPN's through North Korea to avoid blame.

The opposite; to get outside of North Korea you have to use a vpn which spoofs you to be in a different country, since North Korea is heavily embargoed

Re:

[GoRK]

I dont think you are on the money here, Jerry. It's not as if this activity is tremendously demanding of resources, and it is de-facto revenue positive. Invoking China and Russia as enablers is the literal definition of a straw man argument. All NK needs is internet access and a potato to connect to a bigger system; they have remote systems in the US and other western countries to use as bastions, and they will send people out of country as needed to keep these enterprises operating.

Re:

[sysrammer]

Well played.

Thanks, Microsoft

[RUs1729]

Those of us who do not use Windows in our desktops cordially thank you: Windows' market share combined with your predictable stupidity and ineptness all but guarantee that they bad guys will carry on focusing on Windows, while leaving the rest of us alone.

Microsoft

[RitchCraft]

The hits just keep on coming.

What's the point of having spies who don't spy?

[newbie_fantod]

In the West they can sell a lot of Aston Martins, but that's not so much of an advantage in Peoples Democratic Republic of Korea.