DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Korea Aerospace Industries

Date (as written)
2021-06
Year
2021
Country
Korea, Republic of
Actors (as written)
Kimsuky
Actor pages
Kimsuky
Tags (as written)
Defense Espionage DataBreach

Source entries (5)

lazarus.day

Korea Aerospace Industries · 2021-06
Korea Aerospace Industries was reportedly hacked twice in 2021, exposing KF-21 Boramae fighter design drawings and related defense technical information. The reporting said Korean police, military, and intelligence authorities were investigating the breach at KAI's Sacheon headquarters, and a South Korean lawmaker assessed possible links to North Korea's Reconnaissance General Bureau and Kimsuky while noting that final attribution had not been confirmed.
https://lazarus.day/incidents/kai/

Mendeley Data: Collection of DPRK state-sponsored threat actors' activities v2 (Lyu, Sungkyunkwan Univ.)

Korea Aerospace Industries · 2021-06
Reported: 2021-06; Victims: Korea Aerospace Industries; Motivations: Espionage DataBreach; Sectors: Defense; Countries: Korea, Republic of
https://data.mendeley.com/datasets/wwb2rzgfn7/2

Seoul Economic Daily (English edition), "A Decade After OPLAN 5015 Breach, North Korea Turns to AI Hacking" (2026-10-05)

Korea Aerospace Industries targeted
Korea Aerospace Industries is known to have been targeted by North Korea-linked hacking groups in the past, though experts say it is difficult to conclude that KF-21 technology was leaked.
https://en.sedaily.com/politics/2026/10/05/a-decade-after-oplan-5015-breach-north-korea-turns-to-ai

Hankook Ilbo 한국일보 (hankookilbo.com)

美 보안업체 "KAI 해킹 주범은 北 조직 '안다리엘'"-정치ㅣ한국일보 · 2021-07-01
attribution sentence(s): 첫 국산 전투기 ‘KF-21(보라매)’ 개발 업체인 한국항공우주산업(KAI)을 해킹한 주체가 북한의 사이버 범죄 조직 ‘안다리엘(Andariel)’이라는 주장이 제기됐다. | 최근 첨단 군사기술을 보유한 국내 연구기관과 방산업체에 대한 해킹 정황이 속속 드러나면서 ‘북한 배후설’이 힘을 얻고 있다. | 1일 미국 북한전문매체 자유아시아방송(RFA)에 따르면 미 사이버 보안 업체 파이어아이의 프레드 플랜 위협정보 선임분석관은 이날 “지난달 초부터 한국 국방ㆍ우주 업체를 겨냥한 북한의 사이버공격 활동을 인지하고 있었다”며 주체로 해킹 조직 안다리엘을 지목했다.
https://www.hankookilbo.com/news/article/A2021070111100005670

UN Panel of Experts S/2022/132

Attempted hack of virtual private network devices of Korea Aerospace Industries
Para 155: “The Panel was informed that the same group may have attempted to hack the virtual private network devices of Korea Aerospace Industries in order to acquire technological data from the internal network.”
https://undocs.org/S/2022/132

Suggest a correction on GitHub