FudModule Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

January 30, 2026

Last Seen

August 12, 2026

Related Threat Clusters

Lazarus Group Exploits Windows AFD.sys Zero-Day Vulnerability
The Lazarus group, linked to North Korea, is exploiting a newly discovered Windows zero-day vulnerability (CVE-2026-68820) in the AFD.sys driver, which provides SYSTEM-level access. This vulnerability is being leveraged…

2 articles · Updated August 12, 2026
CrowdStrike Identifies Three Splinter Groups from LABYRINTH CHOLLIMA
CrowdStrike has reclassified the North Korea-linked intrusion set LABYRINTH CHOLLIMA into three distinct units: GOLDEN CHOLLIMA and PRESSURE CHOLLIMA, which focus on cryptocurrency theft, and the core LABYRINTH CHOLLIMA…

6 articles · Updated January 30, 2026

Recent Intelligence Reports

Lazarus Hackers Actively Exploiting Windows AFD.sys Zero — Cybersecuritynews · August 12, 2026
CrowdStrike splits LABYRINTH CHOLLIMA into three units — Securitybrief.Asia · January 30, 2026

Related Entities

Golden Chollima Labyrinth Chollima Lazarus Group Pressure Chollima Stardust Chollima Malware Zero-day Exploit Celas Limited Canada India North Korea South Korea