Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor

The Lazarus Group exploited a Windows zero-day vulnerability (CVE-2026-68820) to deploy a new backdoor named Troy targeting defense and aerospace firms in multiple countries. The attack uses social engineering via fake job offers and malicious PDFs to gain SYSTEM access and control infected machines.