corpus.blog
56,966 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a0ca8a-8b13-7215-9ff6-6917dee7d9fb

Operation SyncHole: Lazarus APT goes back to the well

Kaspersky Securelist · published 24 April 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at securelist.com Wayback capture
1blogs citing
First cited
4 Sept 2026
Most recent
4 Sept 2026
Rank this month
not ranked
Links from this post
73
Words captured
3,978

Cited by

Blog
In the post
Date
Rapid7 Blog
DPRK APTs: Ted backdoor and curlRAT target South Korean media and automotive sectors Read at the source ↗
4 Sept 2026

Links from this post

Link
Host
https://encyclopedia.kaspersky.com/glossary/watering-hole/
encyclopedia.kaspersky.com
https://www.krcert.or.kr/en/main.do
krcert.or.kr
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/24053150/1-1.jpg
media.kasperskycontenthub.com
https://www.krcert.or.kr/kr/bbs/view.do?searchCnd=&bbsId=B0000133&searchWrd=&menuNo=205020&pageIndex=1&categoryCode=&nttId=71693
krcert.or.kr
https://www.ncsc.go.kr:4018/main/cop/bbs/selectBoardArticle.do?bbsId=SecurityAdvice_main&nttId=27568&pageIndex=3&searchCnd2=
ncsc.go.kr
https://www.ncsc.go.kr:4018/main/cop/bbs/selectBoardArticle.do?bbsId=SecurityAdvice_main&nttId=93472&pageIndex=2&searchCnd2=
ncsc.go.kr
https://asec.ahnlab.com/en/48198/
asec.ahnlab.com
https://boho.or.kr/kr/bbs/view.do?searchCnd=1&bbsId=B0000133&searchWrd=&menuNo=205020&pageIndex=2&categoryCode=&nttId=71686
boho.or.kr
A cascade of compromise: unveiling Lazarus’ new campaign Read at the source ↗
securelist.com
https://www.welivesecurity.com/2020/11/16/lazarus-supply-chain-attack-south-korea/
welivesecurity.com
https://thorcert.notion.site/TTPs-10-Operation-GoldGoblin-bab695345e984edbb8fe5e16e36face6
thorcert.notion.site
https://attack.mitre.org/techniques/T1583/001
attack.mitre.org
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/22201230/operation-synchole-watering2.png
media.kasperskycontenthub.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/24053203/2-1.jpg
media.kasperskycontenthub.com
https://attack.mitre.org/techniques/T1608/004
attack.mitre.org
https://attack.mitre.org/techniques/T1189
attack.mitre.org
https://attack.mitre.org/techniques/T1190
attack.mitre.org
Lazarus covets COVID-19-related intelligence Read at the source ↗
securelist.com
https://www.us-cert.gov/ncas/analysis-reports/ar20-133a
us-cert.gov
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/24051647/3-3.jpg
media.kasperskycontenthub.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/29094609/operation-synchole-4-en.jpg
media.kasperskycontenthub.com
https://www.virusbulletin.com/uploads/pdf/conference/vb2023/papers/Lazarus-campaigns-and-backdoors-in-2022-2023.pdf
virusbulletin.com
Lazarus targets defense industry with ThreatNeedle Read at the source ↗
securelist.com
https://attack.mitre.org/techniques/T1543/003
attack.mitre.org
https://attack.mitre.org/techniques/T1574/001/
attack.mitre.org
https://attack.mitre.org/techniques/T1547/005
attack.mitre.org
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/24053226/5.jpg
media.kasperskycontenthub.com
https://attack.mitre.org/techniques/T1573/002/
attack.mitre.org
https://attack.mitre.org/techniques/T1573/001/
attack.mitre.org
https://attack.mitre.org/techniques/T1105/
attack.mitre.org
https://attack.mitre.org/techniques/T1218/011/
attack.mitre.org
https://attack.mitre.org/techniques/T1140/
attack.mitre.org
https://attack.mitre.org/techniques/T1027/013/
attack.mitre.org
https://attack.mitre.org/techniques/T1027/009/
attack.mitre.org
https://attack.mitre.org/techniques/T1071/001
attack.mitre.org
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/24053233/6.jpg
media.kasperskycontenthub.com
https://attack.mitre.org/techniques/T1620/
attack.mitre.org
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/24053241/7.jpg
media.kasperskycontenthub.com
https://attack.mitre.org/techniques/T1570/
attack.mitre.org
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/24053249/8.jpg
media.kasperskycontenthub.com
https://attack.mitre.org/techniques/T1574/002/
attack.mitre.org
https://www.cisa.gov/news-events/analysis-reports/ar20-133a
cisa.gov
APT Trends report Q2 2017 Read at the source ↗
securelist.com
Following the Lazarus group by tracking DeathNote campaign Read at the source ↗
securelist.com
https://attack.mitre.org/techniques/T1564/004/
attack.mitre.org
Lazarus group evolves its infection chain with old and new malware Read at the source ↗
securelist.com
https://attack.mitre.org/techniques/T1082/
attack.mitre.org
https://attack.mitre.org/techniques/T1083/
attack.mitre.org
https://attack.mitre.org/techniques/T1057/
attack.mitre.org
https://attack.mitre.org/techniques/T1049/
attack.mitre.org
https://attack.mitre.org/techniques/T1016/
attack.mitre.org
https://attack.mitre.org/techniques/T1087/001/
attack.mitre.org
https://attack.mitre.org/techniques/T1569/002/
attack.mitre.org
https://attack.mitre.org/techniques/T1007/
attack.mitre.org
https://attack.mitre.org/techniques/T1087/002/
attack.mitre.org
https://attack.mitre.org/techniques/T1135/
attack.mitre.org
https://attack.mitre.org/techniques/T1584/001/
attack.mitre.org
https://attack.mitre.org/techniques/T1583/003/
attack.mitre.org
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/04/22202918/operation-synchole-watering10.png
media.kasperskycontenthub.com
https://www.kaspersky.com/enterprise-security/xdr?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team___xdr____33801aaaec3e63b3
kaspersky.com
https://www.kaspersky.com/enterprise-security/apt-intelligence-reporting?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______061e6d9a729b12ec
kaspersky.com
https://opentip.kaspersky.com/f1bcb4c5aa35220757d09fc5feea193b/results?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______502b0cb7152ad945&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/dc0e17879d66ea9409cdf679bfea388c/results?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______05eced29911bfa38&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/2d47ef0089010d9b699cd1bbbc66f10a/results?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______c0302b045b35f26a&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/www.smartmanagerex.com/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______b0f59a59a683a760&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/hxxps%3a%2f%2fthek-portal.com%2feng%2fcareer%2findex.asp/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______fdb8649dc06153b5&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/hxxps%3a%2f%2fbuilsf.com%2finc%2fleft.php/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______610c02ea25d8b73d&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/hxxps%3a%2f%2fwww.rsdf.kr%2fwp-content%2fuploads%2f2024%2f01%2findex.php/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______7c04f0d192198a48&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/hxxp%3a%2f%2fwww.shcpump.com%2fadmin%2fform%2fskin%2fformbasic%2fstyle.php/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______0fe4f997438edf3e&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/hxxps%3a%2f%2fhtns.com%2feng%2fskin%2fmember%2fbasic%2fskin.php/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______17aee10eb4d1cf1b&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/hxxps%3a%2f%2fkadsm.org%2fskin%2fboard%2fbasic%2fwrite_comment_skin.php/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______f6c8f5495927aa96&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/hxxp%3a%2f%2fbluekostec.com%2feng%2fcommunity%2fwrite.asp/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______e24614c0a36961f3&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/hxxp%3a%2f%2fdream.bluit.gethompy.com%2fmobile%2fskin%2fboard%2fgallery%2findex.skin.php/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______6c691b2ef8767d32&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com