Under Siege: GTIG Report Exposes North Korean Spies & Russian Drone Hacks in Defense Sector

GTIG warns the defense industrial base is under a sustained, multi-vector assault from state-sponsored and criminal actors—notably Russian, Chinese, and North Korean groups—targeting emerging technologies, supply chains, and personnel. The report details APT activity (e.g., TEMP.Vermin, APT44/Sandworm), malware like INFAMOUSCHISEL, insider placement by DPRK IT workers, exploitation of numerous edge-device zero-days, LLM-assisted reconnaissance and social engineering, and hack-and-leak and DDoS operations by geopolitically motivated hacktivists.