#TouchHub
from there the intrusion stays almost entirely in memory, side-loading malicious dlls beside trusted windows code and chaining through techhub, touchhub, clienthub, and lpeclient. the targets run across south korean software, construction, and wired-communications equipment manufacturing.
November 2, 2026 at 2:40 AM
"Operation FlashHole: Lazarus breaks security, defies control" published by Kaspersky. #CrossWebEX, #LPEClient, #Lazarus, #TOUCHSHIFT, #FlashHole, #Cubridge, #TechHub, #TouchHub, #ClientHub https://securelist.com/lazarus-operation-flashhole/121541
Operation FlashHole: Lazarus breaks security, defies control
securelist.com
October 21, 2026 at 5:18 AM