The Lazarus Group, a well-known cybercrime group from North Korea, has carried out sophisticated and large-scale attacks over the years. Its high-profile attacks have gained wide-spread attention in the cybersecurity community and its victims have suffered significant damage worldwide.

In our latest Campaign of the Month, we dive into a newly discovered attack vector by the Lazarus Group, exploiting a critical vulnerability in the Zoho ManageEngine Service Desk Plus (CVE-2022-47966) using a Remote Access Trojan (RAT) dubbed ‘QuiteRAT’