Lazarus Breaches IIS Servers With Web Shells and Evolving C2 Tactics

The notorious North Korean threat actor Lazarus Group has been identified breaching Windows web servers to establish command-and-control (C2) infrastructure, leveraging compromised machines as proxy servers for further attacks.