UN Panel of Experts S/2024/215
lazarus-luring-employees-trojanized-coding-challenges-case-spanish-aerospace-company/ Lazarus-campaigns-and-backdoors-in-2022-2023.pdf · September/ October
Annex 59: List of DPRK Cyberthreat actors’ malicious activities monitored by the Panel in 2023 (row 40 of 75, PDF p. 326). DPRK cyber actor: Lazarus Group; Report Name: lazarus-luring-employees-trojanized-coding-challenges-case-spanish-aerospace-company/ Lazarus-campaigns-and-backdoors-in-2022-2023.pdf; Case Summary: In one campaign, the Lazarus Group attacked a Spanish aerospace company, deploying several tools. Including a publicly undocumented backdoor, and obtained initial access to the company’s network in 2022 through a spearphishing campaign as a fake recruitervia LinkedIn. Similarly, the Lazarus Group attacked aerospace companies in the Netherlands in October 2021 and a defense company in Poland in February 2023 via its “Operation Dream Job” campaign.; Publication Month: September/ October