Reports emerged just over a week ago of a new cyber-enabled bank heist in Asia.

In recent days, various malware samples have been uploaded to malware repositories which appear to originate from the intrusion. These include both known Lazarus group tools, as well as a rare ransomware variant called ‘Hermes’ which may have been used as a distraction or cover-up for the security team whilst the heist was occurring.
The timeline below provides an overview of the key events...