Security researchers from Kaspersky cited evidence the group has made substantial changes in its attack methodology. Researchers claim Lazarus has also taken to messaging app Telegram, which is popular among cryptocurrency enthusiasts, as a primary attack vector. Victims cited were from the U.K, Russia, Poland and China.