News on Medial

Lazarus hackers return and hijack a Windows security flaw

Techradar · 1y

According to cybersecurity experts, the Lazarus Group, a North Korean state-sponsored hacking group, is exploiting a zero-day vulnerability to disable antivirus programs on Windows devices. The group leverages a flaw in the Windows AppLocker driver, gaining kernel-level access to the device and disabling any installed antivirus programs. The flaw was discovered by Avast, who notified Microsoft and a fix was released as part of the February 2024 Patch Tuesday update. The Lazarus Group is infamous for its cyber-espionage and money heist activities, and is believed to be under the control of the North Korean government.