DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

North Korean state-integrated hacking group Lazarus gained access to networks of defence and maritime companies

Date (as written)
Not available
Year
undated
Country
Not available;Not available;Hungary
Actors (as written)
Lazarus Group/Labyrinth Chollima/HIDDEN COBRA/Guardians of Peace/Diamond Sleet fka ZINC/NICKEL ACADEMY/NewRomanic Cyber Army Team/Whois Hacking Team/Appleworm/Group 77/G0032 (Reconnaissance General Bureau, Bureau 121, Unit 180, Lab 110)
Actor pages
Lazarus GroupLabyrinth ChollimaHIDDEN COBRAGuardians of PeaceDiamond Sleet fka ZINCNICKEL ACADEMYNewRomanic Cyber Army TeamWhois Hacking TeamApplewormGroup 77G0032
Tags (as written)
Hijacking without Misuse

Source entries (1)

EuRepoC

North Korean state-integrated hacking group Lazarus gained access to networks of defence and maritime companies · Not available
The North Korean state-integrated hacking group Lazarus gained access to the networks of defence and maritime companies over an undefined period, Russian IT security firm Kaspersky reported in its third-quarter report on 17 October 2023. Lazarus sent fake job offers to individual employees of the targeted companies via social media, which included malicious applications. They mainly used Trojanised Virtual Networking Clients (VNCs), through which a computer is compromised after the user selected certain servers in the Trojanised VNC. Specifically, this happened to a Hungarian nuclear engineer who received malicious files from a suspicious contact on Telegram and WhatsApp. The affected defence companies manufactured radar systems, unmanned aerial vehicles (UAVs), military vehicles, ships and armament.
https://securelist.com/apt-trends-report-q3-2023/110752/
https://thehackernews.com/2023/10/lazarus-group-targeting-defense-experts.html
https://www.bleepingcomputer.com/news/security/north-korean-hackers-linked-to-defense-sector-supply-chain-attack/
https://www.cctvnews.co.kr/news/articleView.html?idxno=236830

Suggest a correction on GitHub