Operation In(ter)ception

Date (as written): 01.09.2019
Year: 2019
Country: Europe (region);Middle East (region)
Actors (as written): Lazarus Group/Labyrinth Chollima/HIDDEN COBRA/Guardians of Peace/Diamond Sleet fka ZINC/NICKEL ACADEMY/NewRomanic Cyber Army Team/Whois Hacking Team/Appleworm/Group 77/G0032 (Reconnaissance General Bureau, Bureau 121, Unit 180, Lab 110)
Actor pages: Lazarus Group Labyrinth Chollima HIDDEN COBRA Guardians of Peace Diamond Sleet fka ZINC NICKEL ACADEMY NewRomanic Cyber Army Team Whois Hacking Team Appleworm Group 77 G0032
Tags (as written): Data theft;Hijacking with Misuse

Source entries (2)

EuRepoC

Operation In(ter)ception · 01.09.2019

A group (likely the north-Korean APT Lazarus) attacked two central European defense companies via LinkedIn with the goal of espionage. In one case, the attackers tried to monetize access to a victim’s email account through a business email compromise (BEC) attack as the final stage of the operation.

https://www.welivesecurity.com/wp-content/uploads/2020/06/ESET_Operation_Interception.pdf

https://www.reuters.com/article/us-cyber-linkedin-hacks/cyber-spies-use-linkedin-to-hack-european-defence-firms-idUSKBN23O2L7?utm_campaign=wp_the_cybersecurity_202&utm_medium=email&utm_source=newsletter&wpisrc=nl_cybersecurity202

ThaiCERT Threat Group Cards

Operation “In(ter)caption” · 2019-09

Operation “In(ter)caption” Operation “In(ter)caption” At the end of last year, we discovered targeted attacks against aerospace and military companies in Europe and the Middle East, active from September to December 2019. A collaborative investigation with two of the affected European companies allowed us to gain insight into the operation and uncover previously undocumented malware. https://www.welivesecurity.com/wp-content/uploads/2020/06/ESET_Operation_Interception.pdf

https://www.welivesecurity.com/wp-content/uploads/2020/06/ESET_Operation_Interception.pdf

Suggest a correction on GitHub