North Korean threat groups compromised South Korean Semiconductor companies in late 2023 and early 2024

EuRepoC

North Korean threat actors compromised at least two unnamed South Korean semiconductor companies in late 2023 and early 2024, the South Korean National Intelligence Service disclosed in a press release on their website on 4 March 2024. According to the statement, North Korean hacking groups infiltrated the company's internet-connected servers, exploiting vulnerabilities in business servers for document and data management. Through this entry vector, the threat actors gained access to one microchip company in December 2023 and later a second business in the industry in February 2024. The threat actors primarily employed the living-off-the-land techniques. The intrusion resulted in the theft of product design drawings and facility site photos. The National Intelligence Service suspects North Korea's hacking activities may be linked to domestic efforts to produce semiconductors.