← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Three Lazarus RATs coming for your cheese – Fox-IT International blog
WHITE Lazarus mengkuong 2025-09-03 Modified: 2025-10-03
80
IOCs
HIGH VOLUME
A team of researchers from Fox-IT and NCC Group has identified and identified the Lazarus cyber-attack group, which targets companies active in the cryptocurrency sector and financial services sector in 2024 and 2025.
pondratthemeforestratpoolratremotepec2 serverwindowslinuxfigureperfhloaderratstelegramlazaruspythonformatsequelvirustotalwindowquasarfacebooksessionenvapplejeusmacos
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
SessionEnv AppleJeus Linux macOS Windows Lazarus
Indicators of Compromise (2 / 80 total)
All CVE FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL YARA domain hostname
TYPEINDICATORDESCRIPTIONCREATED
URL https://decoded.avast.io/janvojtesek/lazarus-and-the-fudmodule-rootkit-beyond-byovd-with-an-admin-to-kernel-zero-day/ — 2025-09-03
URL https://vipyrsec.com/research/elf64-rat-malware/ — 2025-09-03
References (1)
↗ https://blog.fox-it.com/2025/09/01/three-lazarus-rats-coming-for-your-cheese/