CSIS Significant Cyber Incidents
CSIS entry 246 · March 2023
North Korean hackers targeted U.S.-based cybersecurity research firms in a phishing campaign. The campaign was meant to deliver malware for cyberespionage.
CSIS entry 246
Source entries (1)
Values found later for empty fields
country: U.S. (U.S.-based technology company; also U.S. and European Media organizations)
In June 2022, Mandiant Managed Defense detected and responded to an UNC2970 phishing campaign targeting a U.S.-based technology company.
actors: UNC2970
Since June 2022, Mandiant has been tracking a campaign targeting Western Media and Technology companies from a suspected North Korean espionage group tracked as UNC2970.