APT group associated with North Korea-backed Lazarus Group is utilizing malware named EarlyRat, discovered by Kaspersky researchers. The malware functions by exploiting the Log4j vulnerability and via phishing attacks. It is primarily used to execute commands and collect system data. EarlyRat’s discovery highlights Lazarus Group’s ability to rapidly develop fresh malware, and stopping Lazarus-aligned groups is now a priority for the US federal government.

Cybercriminals Use Malware-Laced Fake Resumes to Target Recruiters
Cybersecurity firm Arctic Wolf Labs warns of an ongoing spear-phishing campaign ‘Venom Spider’ or ‘TA4557’ targeting recruiters and hiring managers with malware hidden in phony