Windows Update used to bypass security software by North Korean hackers
(Windows Phone Central)

Windows Update and GitHub were utilized in a campaign by a notorious cybercrime group. What you need to know A new campaign by the North Korean advanced persistent threat group Lazarus was recently discovered. The campaign used malicious documents pretending to be about a job for Lockheed Martin as part of spear phishing attacks. The Lazarus group also took advantage of Windows Update to bypass security detection mechanisms. Malwarebytes recently discovered a campaign perpetrated by the advanced persistent threat group (APT) known as Lazarus. The campaign used spear phishing attacks that included malicious documents disguised as information about job opportunities with Lockheed Martin. As part of its attack methodology, the Lazarus group uses Windows Update and GitHub to bypass security software. Malwarebytes thoroughly breaks down the attack in technical terms. One part of the campaign uses Windows Update to bypass security detection mechanisms. Malwarebytes notes that this i...