Tag: winupdateservice.exe

1 Attack Reports | 0 Vulnerabilities

Attack reports

Analysis of APT-C-26 (Lazarus) Group's Attack Campaign Using Remote IT Disguise to Deploy Monitoring Software

The report details an attack campaign by APT-C-26 (Lazarus), a highly active APT group targeting various industries globally. The group deployed a customized monitoring program with remote desktop control capabilities, likely used by remote IT personnel infiltrating target companies. The malware co…
apt
north korea
persistence
screen capture
remote desktop
2025-11-21
systemuiext.dll
winupdateservice.exe
remote it
monitorinstaller_update1.exe
monitoring software
Published: November 21, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports