Kaspersky attributes Operation FlashHole to North Korea's Lazarus Group, which abused another mandatory banking security component.
A South Korean joint advisory warns that compromised websites silently infected visitors through AnySign4PC flaws.