DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

South Korean companies connected to the defense industry

Date (as written)
05/12/2023
Year
2023
Country
KR
Actors (as written)
Andariel
Actor pages
Andariel
Tags (as written)
Attack: Targeted Attack; Target Class: Public admin and defence, social security; Attack Class: Cyber Espionage; Tags: Seoul Metropolitan Police, North Korea, Andariel

Source entries (4)

Hackmageddon cyber attacks timelines (Paolo Passeri)

South Korean companies connected to the defense industry · 05/12/2023
The Seoul Metropolitan Police accuses the North Korean group Andariel of targeting South Korean companies connected to the defense industry and stealing 1.2 terabytes of sensitive information about anti-aircraft weapon systems. [Date Occurred: -; Date Discovered: -]
https://www.hackmageddon.com/2024/02/13/1-15-december-2023-cyber-attacks-timeline/
https://therecord.media/north-korea-hackers-stole-anti-aircraft-system-data

Digital Daily 디지털데일리 (m.ddaily.co.kr)

북한 해커조직 ‘안다리엘’, 국내 기업‧기관 수십곳 해킹… 주요 방산기술 탈취 · 2023-12-04
attribution sentence(s): [디지털데일리 이종현기자] 북한 해커조직 안다리엘이 국내 기업 및 기관을 대상으로 지속해서 해킹 활동을 펼친 것으로 확인됐다. | 4일 서울경찰청 안보수사지원과는 미국 연방수사국(FBI)와 공조해 안다리엘이 국내 기업‧기관을 대상으로 해킹 공격을 한 사실을 확인해 수사 중이라고 밝혔다. | 류경동은 북한 최고층 건물인 류경호텔, 류경정주영체육관 등이 있는 평양 시내 명소로 국제통신국과 평양정보센터 등도 이곳에 있다.
https://m.ddaily.co.kr/page/view/2023120414271270181

news.bbsi.co.kr (news.bbsi.co.kr)

북한 해킹조직 '안다리엘'....대공무기 등 국내 방산기술 빼돌려 · 2023-12-04
attribution sentence(s): 북한 해킹조직 '안다리엘'이 국내 방산업체 등을 해킹해 주요 | 기술자료를 탈취하고 랜섬웨어 '몸값(ransom)'을 일부 북한으로 송금한 정황이 포착됐습니다. | 서울경찰청 안보수사지원과는 오늘 미국 연방수사국FBI와 공조해, 북한 해킹조직 ‘안다리엘’이 국내 업체들을 상대로, 해킹 공격을 한 사실을 확인했다고 밝혔습니다.
https://news.bbsi.co.kr/news/articleView.html?idxno=3134956

UN Panel of Experts S/2024/215

Andariel attacks on ROK telecoms, research institutions, universities, IT, defence and financial companies; 1.2 TB stolen including laser weapon data · December 2023 (police announcement)
Para 134: “Andariel attacked multiple telecommunications companies, research institutions, universities and information technology, defence industry and financial companies in the Republic of Korea and stole 1.2 TB of information, including sensitive data on surface-to-air laser weapon systems (see para. 187 and annex 62).” Annex 62: Seoul Metropolitan Police Agency press release on Andariel’s cyberhacking campaign in December 2023; footnote 230: “One member of the Panel is of the view that the information in this annex should be further corroborated.”
https://undocs.org/S/2024/215

Suggest a correction on GitHub