CSIS entry 165 · October 2023
North Korean hackers sent malware phishing emails to employees of South Korea’s shipbuilding sector. South Korea’s National Intelligence Service suggested that the attacks were intended to gather key naval intelligence that could help North Korea build larger ships.
South Korean shipbuilders · 04/10/2023
South Korea's National Intelligence Service reveals that it had observed North Korean threat actors conducting "intensive hacking attacks" on South Korean shipbuilders in August and September. [Date Occurred: During August and September 2023; Date Discovered: During August and September 2023]
북한발 해킹, 국내 조선업계 대상으로 화력 집중 · 2023-10-04
attribution sentence(s): 북한, 해군 무력 강화와 선박공업 발전 중요 | [보안뉴스 김영명 기자] 최근 북한이 해군 군사력 강화를 위해 우리나라의 조선업체를 대상으로 집중적으로 해킹 공격을 벌이고 있다며, 국가정보원(이하 국정원)이 관련 업계에 주의를 당부했다. | 국정원은 올해 8월부터 9월까지 두 달간 북한 해킹조직이 유수의 국내 조선업체들을 상대로 공격을 시도한 사례를 여러 건 포착했다고 밝혔다.
Hacking attempts on shipbuilders in the Republic of Korea · August and September 2023
Para 134: “Democratic People’s Republic of Korea cyberthreat actors conducted multiple hacking attempts on shipbuilders in the Republic of Korea in August and September to steal information that could be used to strengthen the naval military power of the Democratic People’s Republic of Korea. The attackers reportedly sought access to the companies’ systems by pretending to be information technology maintenance suppliers and/or through spearphishing (see annex 61).” (annex 61: National Intelligence Service press release, August 2023)
actors: 북한 해킹조직 (North Korean hacking organization; no group named)
북한 해킹조직이 유수의 조선업체들을 상대로 공격을 시도한 사례를 여러 건 포착했다