Operation FlashHole: Lazarus breaks security, defies control

Kaspersky Securelist threat intelligence feed covering recent campaigns and malware activity, including Lazarus Operation FlashHole, MacSync macOS stealer, PAYLOAD ransomware abusing Active Directory Group Policy, MovieReaper torrent-based Trojan delivery, NightEagle and Toy Ghouls backdoors, Mirage Kitten malware, ValleyRAT, and industrial control system threats. Techniques include watering-hole attacks, compromised torrents, masquerading, GitHub-hosted tooling, MQTT and Matrix-based command and control, Active Directory and RDP exploitation, and attacks against warehouse, aviation, FinTech,.