North Korean threat actor Lazarus Group targeted a specialized engineering company to steal sensitive intellectual property. The hackers breached the organization’s network by exploiting the Log4j vulnerability, moving laterally to compromise eighteen other computers. The hackers installed a backdoor to steal credentials and exfiltrate sensitive data.