Unnamed engineering company with energy and military customers · 2022-02-28
Researchers from Symantec/Broadcom reveal that an unnamed engineering company with energy and military customers was recently the target of the North Korean group Stonefly.
Targeting of specialized engineering companies · Apr 2022
North Korean threat actor Lazarus Group targeted a specialized engineering company to steal sensitive intellectual property. The hackers breached the organization’s network by exploiting the Log4j vulnerability, moving laterally to compromise eighteen other computers. The hackers installed a backdoor to steal credentials and exfiltrate sensitive data.
Unnamed engineering company with energy and military customers · 27/04/2022
Researchers from Symantec/Broadcom reveal that an unnamed engineering company with energy and military customers was recently the target of the North Korean group Stonefly. [Date Occurred: During February 2022; Date Discovered: During February 2022]
Targeting Energy and Military Sectors · April
Annex 76: List of DPRK cyberthreat actors' malicious activities in 2022 monitored by the Panel (table row 12 of 37). RGB Unit: Stonefly; Case Name: Targeting Energy and Military Sectors; SPH √; KAC √; VAS: (blank); Publicized Month: April. (Note: RGB Reconnaissance General Bureau, SPH Significant Phishing, KAC knowledge acquisition and espionage, VAS virtual asset seizures.)
Stonefly cyberattack on an engineering firm in the energy and military sectors · February 2022
Para 125: “Stonefly was reported by the same firm to have recently shifted its focus from distributed denial-of-service (DDoS) attacks on government entities to espionage operations on high-value targets. In February 2022, Stonefly cyberattacked an engineering firm in the energy and military sectors, and a Member State informed the Panel that investigations were under way to confirm any substantial data breach.”
Stonefly: North Korea-linked Spying Operation Continues to Hit High-value Targets · 27 Apr 2022
Espionage group focuses on obtaining classified or sensitive intellectual property that has civilian and military applications.