New Report Reveals North Korean Hackers Targeting Defense Firms Worldwide

A joint advisory from Germany's BfV and South Korea's NIS attributes a long-running cyber espionage campaign to North Korean state-sponsored actors (notably units under the Lazarus umbrella) that target global defense organizations. Attackers use LinkedIn social engineering ('Dream Job') to deliver malware-laden job materials, perform supply-chain compromises against vendor maintenance providers to deploy trojanized updates and web shells, conduct credential theft and lateral movement, and adapt laundering methods for stolen proceeds.