DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Lazarus social engineering (fake job portal profiles) against defense companies

Date (as written)
(not dated)
Year
undated
Actors (as written)
LAZARUS
Actor pages
LAZARUS
Tags (as written)
espionage; social engineering; job lure; defense

Source entries (1)

Germany BfV + ROK NIS second Joint Cyber Security Advisory "Warning of North Korean cyber threats targeting the Defense Sector" (19 February 2024)

Lazarus social engineering (fake job portal profiles) against defense companies · (not dated)
Based on the TTPs used in attacks, the first case is a malicious campaign against a defense research center, and the second describes LAZARUS’ procedure of using social-engineering to attack defense companies.
https://www.verfassungsschutz.de/SharedDocs/publikationen/DE/cyberabwehr/2024-02-19-joint-cyber-security-advisory-englisch.pdf?__blob=publicationFile&v=2

Suggest a correction on GitHub