Lazarus APT Uses Windows Update to Spew Malware
-
The group once again dangled fake job opportunities at engineers in a spear-phishing campaign that used Windows Update as a living-off-the-land technique and GitHub as a C2.
https://threatpost.com/lazarus-apt-windows-update-malware-github/178096/