Lazarus Group used ActiveX zero-day vulnerability to attack South Korean security think tank

An ActiveX zero-day vulnerability used in attacks against a South Korean think tank has been connected to Lazarus Group.

The target of these attacks was the Sejong Institute, a non-profit South Korean think tank which conducts research on national security. The private organization works with academic institutions worldwide.

Read more…
Source: ZDNet