DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

UNC2970 defense targeting and Gemini-assisted target profiling

Date (as written)
2026-02-10 (datePublished)
Year
2026
Actors (as written)
UNC2970
Actor pages
UNC2970
Tags (as written)
defense; cybersecurity

Source entries (1)

Google Threat Intelligence Group (GTIG) / Google Cloud

UNC2970 defense targeting and Gemini-assisted target profiling · 2026-02-10 (datePublished)
UNC2970 has consistently focused on defense targeting and impersonating corporate recruiters in their campaigns. The cluster has used Gemini to synthesize open-source intelligence (OSINT) and profile high-value targets to support campaign planning and reconnaissance.
https://cloud.google.com/blog/topics/threat-intelligence/threats-to-defense-industrial-base

Suggest a correction on GitHub