The North Korean threat actor known as the Lazarus Group has been linked to a previously undocumented JavaScript implant named Marstech1 as part of limited targeted attacks against developers.

Lazarus Group targets job seekers via fake LinkedIn offers, delivering malware that steals crypto wallet data.