The North Korean Lazarus group is running multiple high-risk campaigns: one exploiting Windows and another installing malware through fraudulent blockchain job offers.

State of Cybercrime hosts Matt Radolec and David Gibson discuss the various APT groups, including a prolific ransomware-as-a-service operation and a Chinese cyber espionage gang known as Volt Typhoon, and other vulnerable vulnerabilities in this episode, including:

• Lazarus FudModule rootkit attacks and the concurrent Eager Crypto Beavers campaign

• RansomHub attacks on Halliburton, Change Healthcare, and hundreds more

• Large-scale extortion of AWS environments through exposed ENV files

• Hundreds of exposed servers from Volt Typhoon’s ISP targeting

• Payment gateway breach of over 1.7 million credit card owners