2nd October – Threat Intelligence Report · 2023-10-02
A campaign targeting employees of a Spanish aerospace company has been discovered. The North Korean APT group Lazarus impersonated a Meta recruiter to establish rapport with the victims and delivered ‘coding challenges’ that contained malicious backdoors as part of the ‘recruitment’ process.
Undisclosed Spanish aerospace company · 29/09/2023
Researchers from ESET reveal that, as part of their "Operation Dreamjob" campaign, the North Korean 'Lazarus' group targeted employees of an aerospace company located in Spain with fake job opportunities to hack into the corporate network using a previously unknown 'LightlessCan' backdoor. [Date Occurred: -; Date Discovered: -]
Lazarus attack on a Spanish aerospace company with LightlessCan backdoor (fake Meta recruiter) · Q3 2023 (from title: APT QUARTERLY HIGHLIGHTS - Q3 : 2023)
In another incident, researchers discovered a cyberattack by the Lazarus group on a Spanish aerospace company in late September 2023. The attack began with a LinkedIn message from a fake Meta recruiter, leading employees to execute malicious coding challenges that delivered a sophisticated backdoor known as LightlessCan.