DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

CSIS entry 615

Date (as written)
June 2020
Year
2020
Actor pages
Lazarus group

Source entries (2)

CSIS Significant Cyber Incidents

CSIS entry 615 · June 2020
Suspected North Korean hackers compromised at least two defense firms in Central Europe by sending false job offers to their employees while posing as representatives from major U.S. defense contractors
https://csis-website-prod.s3.amazonaws.com/s3fs-public/2026-07/260706_Significant_Cyber_Events.pdf?VersionId=1Li2342elpx5OV3lnGEYyXXB_LRbGnPm

CFR Cyber Operations Tracker

Targeting of Central European aerospace and defense companies · Jun 2020
Hackers impersonated recruiters from Collins Aerospace and General Dynamics to lure in employees with enticing job offers, subsequently tricking them into opening malicious files sent via LinkedIn’s private messaging app.
https://www.cfr.org/cyber-operations/targeting-of-central-european-aerospace-and-defense-companies
https://www.eset.com/us/about/newsroom/press-releases/operation-interception-starting-with-a-linkedin-message-threat-actors-went-after-both-secret-inf/

Values found later for empty fields

country: Central Europe
Suspected North Korean hackers compromised at least two defense firms in Central Europe by sending false job offers to their employees while posing as representatives from major U.S. defense contractors
https://csis-website-prod.s3.amazonaws.com/s3fs-public/2026-07/260706_Significant_Cyber_Events.pdf?VersionId=1Li2342elpx5OV3lnGEYyXXB_LRbGnPm
actors: Lazarus group
The attacks we investigated showed all the signs of espionage, with several hints suggesting a possible link to the infamous Lazarus group.
https://www.eset.com/us/about/newsroom/press-releases/operation-interception-starting-with-a-linkedin-message-threat-actors-went-after-both-secret-inf-4/

Suggest a correction on GitHub