Lazarus taking ‘careful steps’ to remain undetected during cryptocurrency stealing campa…

North Korea-linked threat group Lazarus has significantly updated its attack tactics in an effort to remain undetected during cryptocurrency stealing campaigns.

That’s according to the researchers from cyber security firm Kaspersky, who claim to have found evidence that Lazarus is now using messaging app Telegram to deliver malicious files to potential targets in order to steal cryptocurrency.

Lazarus is taking more careful steps, the researchers claim, such as setting up fake crypto exchanges to lure in victims. Those fake exchanges are usually created using free web templates and have separate websites with links to social media platforms.

In one instance, attackers infected a Windows user with malicious files that were delivered through messaging app Telegram, and not through the fake crypto exchange itself. Telegram is so popular in the cryptocurrency…