Lazarus Trojanized DeFi app for delivering malware

The malware operator exclusively used compromised web servers located in South Korea for this attack. The threat actor configured this infrastructure with servers set up as multiple stages.