: Assume any credentials stored on the machine (especially browser-saved passwords) are compromised.
: Lazarus Group (sub-group: Diamond Sleet/Zinc).
: Connections to suspicious domains or hardcoded IP addresses used for data exfiltration. Recommendations