OPERATION BLACKSMITH: LAZARUS TARGETS ORGANIZATIONS WORLDWIDE USING NOVEL TELEGRAM-BASED MALWARE WRITTEN IN DLANG

Summary from the TLDR InfoSec newsletter

Cisco Talos has discovered a new campaign by the Lazarus Group called "Operation Blacksmith." The campaign involves the use of three new malware families written in DLang, including two remote access trojans (RATs) that use Telegram for command and control. The malware families discovered in Operation Blacksmith demonstrate a shift in Lazarus Group's tactics and the use of DLang as a programming language.