News and Analysis

North Korean hackers are exploiting the Log4j vulnerability in open-source software to attack sectors such as manufacturing, agriculture and physical security, according to Cisco’s Talos Intelligence Group. The hackers operate under the ‘Lazarus umbrella’ and employ new malware families and the Log4Shell exploit. Dubbed ‘Operation Blacksmith’, the campaign has similarities to another reported by Microsoft involving a North Korean group known as Onyx Sleet or Andariel.