North Korean Hackers Launch New ActiveX Attacks

By Ionut Arghire on July 17, 2018 Watering Hole Attacks Target South Korean Users With ActiveX Exploits
 
A new series of reconnaissance attacks targeting ActiveX objects has been associated with the North Korean-linked Andariel group, a known branch of the notorious Lazarus Group.
 
In May, the group was observed exploitnig an ActiveX zero-day vulnerability in a series of attacks on South Korean targets, mainly for reconnaissance purposes. A script injected into compromised websites would identify the visitors’ operating system and browser and check for ActiveX and running plugins from a specific list of ActiveX components if Internet Explorer was detected.
 
Full Article.