Lazarus Group Strikes Again: Nuclear Engineers Fall for Fake Job Scam!
Lazarus Group strikes again with CookiePlus, a new modular backdoor targeting nuclear employees. This infamous DPRK-linked cyber gang is back to their old tricks, using fake job offers to launch malware. They’re not just hacking for kicks; they’re boosting their 2024 crypto haul, already hitting $1.34 billion.

Hot Take:
It seems that the Lazarus Group is not just dreaming about jobs, they’re dreaming about world domination, one modular malware at a time! Who knew applying for a job in aerospace could land you a side gig in cyber espionage?
Key Points:
- Lazarus Group, linked to North Korea, targets nuclear-related organizations with complex infection chains.
- Operation Dream Job, also known as NukeSped, has been active since 2020.
- The latest attacks involve trojanized VNC apps used as skills assessments for job applicants.
- CookiePlus, a new modular backdoor, is part of the evolving Lazarus Group malware arsenal.
- North Korean hackers have stolen $1.34 billion from cryptocurrency exchanges in 2024 alone.
Already a member? Log in here