DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

12th July – Threat Intelligence Report

Date (as written)
2021-07-12
Year
2021

Source entries (3)

CFR Cyber Operations Tracker

Targeting of prospective engineers and programmers · Jul 2021
Lazarus Group was accused of sending phishing emails pretending to be from major engineering firms to engineers looking for work. The engineers were prompted to download malicious Microsoft Word documents.
https://www.cfr.org/cyber-operations/targeting-of-prospective-engineers-and-programmers
https://cybersecurity.att.com/blogs/labs-research/lazarus-campaign-ttps-and-evolution
https://threatpost.com/lazarus-engineers-malicious-docs/167647/?web_view=true

Check Point Research

12th July – Threat Intelligence Report · 2021-07-12
The North Korean threat group Lazarus has conducted a phishing campaign impersonating Airbus, General Motors, and Rheinmetall, targeting engineers from Europe and the US. Malicious documents containing macros were used to perform arbitrary code injection into running processes on infected systems.
https://research.checkpoint.com/2021/12th-july-threat-intelligence-report/

Hackmageddon cyber attacks timelines (Paolo Passeri)

Job-seeking engineers · 06/07/2021
Researchers from AT&T Alien Labs discover a new campaign by the notorious Lazarus APT group, spreading malicious documents to job-seeking engineers. The ploy involves impersonating defense contractors seeking job candidates. [Date Occurred: -; Date Discovered: -]
https://www.hackmageddon.com/2021/08/04/1-15-july-2021-cyber-attacks-timeline/
https://threatpost.com/lazarus-engineers-malicious-docs/167647/

Suggest a correction on GitHub