⤷ Title: Lazarus Group Attacks Aerospace/Defense with New ChaCha20-Encrypted Comebacker Backdoor
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 11 Nov 2025 00:06:50 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #aerospace #APT #ChaCha20 #Comebacker #cyber_espionage #defense #Lazarus Group #Macro Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 11 Nov 2025 00:06:50 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #aerospace #APT #ChaCha20 #Comebacker #cyber_espionage #defense #Lazarus Group #Macro Malware
Daily CyberSecurity
Lazarus Group Attacks Aerospace/Defense with New ChaCha20-Encrypted Comebacker Backdoor
ENKI exposed a Lazarus Group espionage campaign targeting aerospace/defense firms. The new Comebacker variant uses malicious Word macros and ChaCha20/AES to deliver a memory-resident backdoor.