Lazarus APT updates its toolset in watering hole attacks