Operation “North Star” · 2020
Operation “North Star”
In this 2020 campaign McAfee ATR discovered a series of malicious documents containing job postings taken from leading defense contractors to be used as lures, in a very targeted fashion.
https://www.mcafee.com/blogs/other-blogs/mcafee-labs/operation-north-star-a-job-offer-thats-too-good-to-be-true/
https://www.mcafee.com/blogs/other-blogs/mcafee-labs/operation-north-star-summary-of-our-latest-analysis/
https://www.mcafee.com/blogs/other-blogs/mcafee-labs/operation-north-star-behind-the-scenes/
3rd August – Threat Intelligence Bulletin · 2020-08-03
Researchers report of a North Korean cyberespionage campaign that targets employees in the US defense and aerospace sector through fake job offers on LinkedIn. The attack is attributed the Lazarus APT group.
U.S. defense and aerospace contractors · 29/07/2020
Researchers from McAfee reveal the details of Operation North Star, a long-lasting spear-phishing campaign targeting U.S. defense and aerospace contractors between early April and mid-June 2020.
Operation (North Star) North Star: A Job Offer That's Too Good to be True? · Jul 29, 2020
the indicators from the 2020 campaign point to previous activity from 2017 and 2019 that was previously attributed to the threat actor group known as Hidden Cobra. Hidden Cobra is an umbrella term used to refer to threat groups attributed to North Korea by the U.S Government.