Lazarus Strikes Again: North Korean Hackers Dream Big with UAV Espionage!
Lazarus hackers, North Korea’s cyber-spies, are back with Operation DreamJob, targeting European defense firms with fake recruitment lures. Their aim? To pilfer UAV technology secrets and boost North Korea’s drone program. Armed with trojanized PDFs and the ScoringMathTea RAT, they’re proving that even job offers can come with malware.

Hot Take:
Looks like North Korea’s Lazarus group is job hunting again, but instead of sprucing up their resumes, they’re sprucing up drones with a side of espionage! Operation DreamJob? More like Operation Nightmare for European defense firms!
Key Points:
- Lazarus APT group, linked to North Korea, targets three European defense firms in Operation DreamJob.
- Attackers used fake job offers with trojanized PDFs to gain access to sensitive UAV technology.
- Operation aligns with North Korea’s efforts to reverse-engineer Western drones, aiding their UAV program.
- Tools used in the attack include the ScoringMathTea RAT and various loaders for data exfiltration and control.
- Despite media exposure, employee awareness in potential target sectors remains low.
Already a member? Log in here
