EuRepoC
North Korean state-sponsored hacking group 'Lazarus' gained access to network of unspecified Spanish aerospace company beginning in 2022 · 01.01.2022
The North Korean state-sponsored hacking group 'Lazarus' gained access to the network of an unspecified Spanish aerospace company beginning in 2022, the Slovakian IT security firm ESET assessed with high confidence in a technical report released on 29 September 2023. The APT group posed as a recruiter for the technology company Meta and tricked an employee of the Spanish aerospace company into opening two malicious files on their corporate computer, which were disguised as programming tasks that the employee wanted to solve as part of the job application. After Lazarus had established access, the group, among other payloads, introduced the previously undocumented backdoor LightlessCan in the networks of the affected company. ESET linked the infiltration to Operation DreamJob, a Lazarus activity cluster identified by ClearSky in August 2020 targeting defense and aerospace companies for espionage.
Sources cited by EuRepoC (12)