Operation-Marstech-Mayhem-Report_021025_03.pdf
Excerpt
SecurityScorecard.com
info@securityscorecard.com
Background
In the wake of Operation99 and Operation Phantom Circuit, STRIKE uncovered that the Lazarus Group had engineered an advanced implant, codenamed "marstech1." This state-of-the-art tool marks a significant evolution from earlier iterations deployed in global campaigns against developers, featuring unique functional enhancements that distinctly set it apart.
Key Findings
• A new implant, Marstech1, was developed and deployed by the threat actor, showing significant differences from previous versions.
• The implant Marstech seems to be…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by SecurityScorecard on securityscorecard.com.
Mentioned in the excerpt
More from SecurityScorecard8
- Resources - SecurityScorecardSecurityScorecard · Added 25 Oct
- Resources - SecurityScorecardSecurityScorecard · Added 18 Oct
- A Deep Dive into Medusa RansomwareSecurityScorecard · Added 29 Oct 2025
- How to Analyze Java Malware – A Case Study of STRRATSecurityScorecard · Added 18 Jul 2025
On the same topics
- Retrohunting APT37: North Korean APT used VBA self decode technique to inject RokRatMalwarebytes · Published 5 Jan 2021
- Kazuar (Malware Family)Malpedia · Added 18 Oct
- Animal Farm APT and the Shadow of French IntelligenceInfosec Institute · Published 8 Jul 2015
- Darktrace Malware Analysis: Unpacking SnappyBeeDarktrace · Published 3 Feb
