- Published
- Source
- Securelist (Kaspersky)
- Filed under
- Nation-state, Malware & exploits
Kaspersky researchers analyze Operation FlashHole – a recent complex attack by Lazarus, involving a sophisticated malware set, watering-hole technique and abuse of CrossWeb EX financial security software.
Originally reported bySecurelist (Kaspersky)Read the full story on Securelist (Kaspersky) (opens in a new tab)
Share this storyLinkedIn (opens in a new tab)X (opens in a new tab)WhatsApp (opens in a new tab)Email
Defending against state-backed attackers
- Patch internet-facing devices first – VPNs, firewalls and email gateways are their usual way in.
- Hunt for the published indicators and techniques in your own logs, not just in your antivirus.
- Read the joint advisories: they name the products, the techniques and the signs to look for.
MyCyberWay training
Blue Team Specialist
Breaches like this get investigated, not just reported.
Blue Team Specialist takes the Analyst curriculum and adds the investigator's work: one incident owned end to end, hypothesis-led threat hunting with MITRE ATT&CK and KQL, breach analysis, and a root cause report people can act on.
- Scope, attacker path and dwell time
- Threat hunting with ATT&CK and KQL
- Root cause analysis and reporting
MyCyberWay Premium JobsEvery UK cyber security role, scored against your CV.173 UK cyber security roles in the last run · 82 at employers with a sponsor licenceExplore Premium Jobs
Headlines and short summaries only, except where a public body publishes under an open licence. Every story links to its publisher, who owns it. MyCyberWay does not edit or endorse third-party reporting.
