Lazarus_Group__2021__ASEC_REPORT_vol.102_ENG.pdf

# Executive Summary ASEC's report analyzes 'Operation Dream Job', a targeted social‑engineering campaign (suspected Lazarus activity) that lured aerospace and defense job seekers with fake recruiter messages and malicious documents; the report provides technical analysis of downloader/remote‑access strains (Lcpdot, Torisma and related samples signed with the '2 TOY GUYS LLC' certificate), lists IoCs (file hashes, filenames, URLs/domains, IPs), describes TTPs (malicious macros, signed binaries, steganography, downloaders) and outlines AhnLab detection coverage and attribution caveats.