Lazarus Group Steals Drone Data from European Manufacturers

North Korea's Lazarus Group is targeting European drone manufacturers in Central and Southeastern Europe to steal proprietary data, aligning with Pyongyang's drone program expansion. ESET researchers identified at least three organizations hit, using job-themed lures in Operation DreamJob.

The primary payload is ScoringMathTea RAT, providing remote control since 2022, with commands for file manipulation and additional payload execution. The RAT remains stable, using GitHub projects for evasion without compromising accounts.

Defend against this: Boost employee awareness, enforce reporting policies, and monitor for suspicious activities. These campaigns underscore the need for robust cybersecurity in sensitive sectors.

NPAV offers a robust solution to combat cyber fraud. Protect yourself with our top-tier security product, Z Plus Security