[Intel]: https://www.welivesecurity.com/2023/04/20/linux-malware-strengthens-links-lazarus-3cx-supply-chain-attack/

[timb-machine]

Area

Malware reports

Parent threat

Initial Access, Persistence, Privilege Escalation

Finding

https://www.welivesecurity.com/2023/04/20/linux-malware-strengthens-links-lazarus-3cx-supply-chain-attack/

Industry reference

attack:T1566.001:Spearphishing Attachment
attack:T1546.004:Unix Shell Configuration Modification
uses:RedirectionToNull
uses:Go

Malware reference

wltm
OdicLoader
SimplexTea

Actor reference

Lazarus

Component

Linux

Scenario

No response