I don't quite understand
Any half competent criminal hacker will try to use Windows Admin Shares for lateral movement so why is this considered a hallmark of the Lazarus Group ? To me it looks more like a basic technique.
What's next, a ping as a indubitable proof of Fancy Bear at work ?