DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

California Defense Company

Date (as written)
2022-03
Year
2022
Country
United States
Actors (as written)
Andariel
Actor pages
Andariel
Tags (as written)
DataBreach Defense

Source entries (2)

lazarus.day

California Defense Company · 2022-03
Andariel allegedly targeted a California defense company in follow-on intrusions funded by ransom payments from Maui ransomware attacks against U.S. healthcare organizations. Prosecutors said the actors exploited unpatched known vulnerabilities, including Log4Shell, and stole sensitive data across defense, government, technology, manufacturing, and energy targets, including military aircraft-related technical information and intellectual property.
https://lazarus.day/incidents/californiadefense/

US court filing via CourtListener RECAP: United States v. Hyok

Intrusion into "California Defense Company" (satellite builder) · On or about March 15, 2022
On or about March 15, 2022, Conspirators used Virtual Private Server 1 to gain and retain unauthorized access for more than a month to the California Defense Company's computer system, including by using the victim's administrator account and digital authentication certificates. [Case No. 2:24-cr-20061, U.S. District Court for the District of Kansas; filing: INDICTMENT filed against Rim Jong Hyok as to counts 1, 2.]
https://storage.courtlistener.com/recap/gov.uscourts.ksd.153552/gov.uscourts.ksd.153552.1.0.pdf

Suggest a correction on GitHub