US defense and aerospace sectors targeted in new wave of North Korean attacks

[InfoSec News <alerts () infosecnews org>]

https://www.zdnet.com/article/us-defense-and-aerospace-sectors-targeted-in-new-wave-of-north-korean-attacks/

By Catalin Cimpanu
Zero Day
ZDNet.com
July 30, 2020

While the world was in the midst of the COVID-19 pandemic, North Korean 
hackers were targeting the US defense and aerospace sectors with fake job 
offers in the hopes of infecting employees looking for better 
opportunities and gaining a foothold on their organizations' networks.

The attacks began in late March and lasted throughout May 2020, 
cyber-security firm McAfee said in a report published today.

Tracked under the codename of "Operation North Star," McAfee said these 
attacks have been linked to infrastructure and TTPs (Techniques, Tactics, 
and Procedures) previously associated with Hidden Cobra -- an umbrella 
term the US government uses to describe all North Korean state-sponsored 
hacking groups.


THE GOOD OL' FAKE JOB OFFER TRICK

As for the attacks themselves, McAfee said they were run-of-the-mill 
spear-phishing emails that enticed recipients to open boobytrapped 
documents containing a possible job offer.

[...]



--
Subscribe to InfoSec News
https://www.infosecnews.org/subscribe-to-infosec-news/
Follow InfoSec News on Twitter
https://twitter.com/infosecnews_
Follow InfoSec News on LinkedIn
https://www.linkedin.com/company/infosecnews/