The North Korean threat actor Lazarus Group leveraged a Windows update to conduct spear-phishing attacks, sending fake job offers from Lockheed Martin. Lazarus has used fake job offers in the past to plant malware on defense industry systems.