Microsoft says a North Korean hacking group has breached Taiwanese multimedia software company CyberLink and trojanized one of its installers to push malware in a supply chain attack targeting potential victims worldwide.
ReversingLabs researchers link three new malicious PyPI packages that are part of the VMConnect campaign to the notorious North Korean APT group Lazarus.