Kaspersky’s Global Research and Analysis Team (GReAT) has reported a new campaign by cybercriminal group Lazarus, which exploits organizations through legitimate software, even if vulnerabilities have been identified and patches issued. The team says the organization has consistently targeted one particular software vendor, attempting to access source codes and disrupt the software supply chain. Kaspersky recommends constantly updating software and being vigilant for suspicious messages requesting sensitive information.

Horabot Malware Targets 6 Latin American Nations Using Invoice-Themed Phishing Emails
Cybersecurity researchers have identified a new phishing campaign distributing Horabot malware, predominantly targeting Spanish-speaking Windows users in Latin America. The campaign sends out malicious emails