Hackers from the DPRK attacked South Korean defense enterprises

Hackers from the DPRK attacked South Korean defense companies and stole data.

This was reported by RBC-Ukraine with reference to Yonhap News.

"Hacker groups have been penetrating the internal networks of South Korean defense companies and stealing technical data over the past 18 months," police said.

According to the police, three DPRK groups were involved - Lazarus, Andariel and Kimsuky. Since the end of 2022, they have attacked 83 domestic defense companies. Ten companies have been confirmed to have been affected.

It was found that North Korea used various measures, including direct access, the use of malicious code, and the theft of information from server accounts.

The targeted companies were completely unaware of the attacks until the police and the National Intelligence Service (NIS) launched an investigation earlier this year.

By this time, North Korea had stolen technology related to unmanned aerial vehicle engines and submarine-launched ballistic missile (SLBM) launchers.

According to the National Intelligence Agency, last year, the number of international cyberattacks on South Korean government agencies reached an average of 1.62 million per day, up 36 percent from a year earlier. Of these, 80 percent came from the North.

Author - Serhii Kolomiets, 26/04/2024