North Korean hackers target South Korean defense contractor on 8 August 2024

EuRepoC

North Korean hackers targeted a South Korean defense contractor in early 2024. Local media, citing defense and police sources, reported that a subcontractor for a major defense technology company had been hacked, leading to the leak of technical data about the South Korean military’s Baekdu and Geumgang surveillance aircraft. South Korean officials suspect that North Korea orchestrated the breach of the company that produces operation and maintenance manuals for military equipment, reflecting its renewed focus on small subcontractors whose security level tends to be lower than big manufacturers.

ThaiCERT Threat Group Cards

South Korea says DPRK hackers stole spy plane technical data https://www.bleepingcomputer.com/news/security/south-korea-says-dprk-hackers-stole-spy-plane-technical-data/

Hackmageddon cyber attacks timelines (Paolo Passeri)

A South Korean defense contractor which produces operational and maintenance manuals for military equipment, including the two spy planes "Baekdu" and "Geumgang", was allegedly hacked by threat actors from North Korea. [Date Occurred: -; Date Discovered: -]

보안뉴스 (boannews)

최근에는 북한 해커조직 김수키가 방산 기업의 협력업체를 해킹해 정찰기 기술자료 등을 탈취한 것으로 알려졌다. 취재 결과, 이와 관련해 현재 관계기관이 합동으로 조사 중인 것으로 파악됐다.

Boannews 보안뉴스 (boannews.com)

attribution sentence(s): 북 김수키·안다리엘 등 총동원해 방산·군·건설 분야 해킹해 기술 자료 탈취 | 사이버안보법 필요성 다시금 부각...북한, 무기정보 등 군사기밀 탈취에 주력 | [보안뉴스 김경애 기자] 북한의 사이버 공격이 거세지고 있다.

Donga reported that a South Korean defense contractor which produces operational and maintenance manuals for military equipment, including the two spy planes, was hacked by North Koreans.