CEX successfully prevented a suspected Lazarus attack, identifying its IP Address and major security vulnerabilities.

GateUser-6433627c · 2025-05-30T21:03:29+00:00

The CEX security team successfully blocked a suspected Lazarus attack, confirming its IP address and discovering significant security vulnerabilities. The attack used social engineering to induce employees to run malware, but employees reported it in time, and the security team intervened to uncover the malicious script, exposing the attacker's IP. The team believes the technical level of the attacking organization varies and has identified accounts that may be used for testing and developing malware. Investigations show a contrast between their phishing strategies and the technologies used.

GateUser-6433627c

2025-05-30 21:03:29

Abstract generation in progress

[CEX Successfully Blocks Suspected Lazarus Attack, Finds IP Address and Major Security Breach] CEX said in a Friday announcement that its security team successfully blocked a social engineering attack launched by the Lazarus Group, a hacking group linked to North Korea. “Recently, an employee was contacted via LinkedIn and offered to collaborate on an NFT marketplace Web3 project with the goal of inducing victims to run the project’s code containing malicious code on their computers,” CEX said. The employee promptly identified the risk and reported it, and the security team intervened to investigate and discovered that the attack attempted to reuse malicious code called “BeaverTail”. “We found that an ‘operational security bug’ in the script may have exposed the attacker’s ‘original IP address’,” CEX noted. The team added: "The organization appears to have split into multiple groups with varying skill levels. "They have identified at least 10 accounts that could be used to test or develop malware. CEX added: "This survey shows a stark contrast between the organization’s rudimentary phishing strategies and its advanced utilization techniques. ”

IP1,57%

View Original

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.