Researchers at security firm Group-IB released a report that links the notorious Lazarus APT to North Korea. The group was behind, other large-scale cyber espionage campaigns against targets worldwide, including the Troy Operation, the DarkSeoul Operation, and the Sony Picture. The researchers also discovered that the group is masquerading its operations as Russian. The attackers achieved. by employing a legitimate. legitimate VPN client SoftEther. VPN. In some cases, they also used corporate web servers that were part of the. attacked infrastructure.”]
Source: https://securityaffairs.co/wordpress/59578/apt/lazarus-apt-linked-north-korea.html