logo

Exclusive: Eye on Weapons Systems, North Korean Hackers target US Defense Contractors

ID: 6416b1fd-967f-52e6-b602-a03a38af0b2f

STIX ID: report--6416b1fd-967f-52e6-b602-a03a38af0b2f

Feed Name: Security Ledger

Threat Score
90/100

Date Published: 2017-11-11

Date Updated: 2026-04-26

Author: Paul Roberts

...
...

The Security Ledger reports an increase in cyber intrusion attempts attributed to North Korean-linked threat actors (Lazarus Group and affiliated subgroups) targeting U.S. and South Korean defense contractors to obtain weapons-system IP and other sensitive data. Attacks described include spear phishing and targeted probes of corporate administrative networks, with broader discussion of DPRK malware capabilities, supply-chain risks, and potential HUMINT-assisted infiltration.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.