Lazarus Associated with New Malware Exploiting INITECH Process
According to AhnLab ASEC, the malware had infected organizations by disguising as an executable of INISAFE CrossWeb EX V3, a security program of INITECH. The malware was injected in the form of a DLL file into inisafecrosswebexsvc.exe to evade detection.