The Lazarus Group initiated an initial access attempt through spear-phishing emails targeting employees in the defense sector. The emails contained job recruitment lures designed to entice the recipient into opening a malicious attachment that deploys the Rising Sun implant.