{
  "name": "North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime's Military and Nuclear Programs",
  "slug": "north-korea-cyber-group-conducts-global-espionage-campaign-to-advance-regimes-military-and-nuclear-programs",
  "description": "The U.S. Federal Bureau of Investigation (FBI) and several partner agencies are releasing this advisory to highlight a North Korean state-sponsored cyber group known as Andariel, operating under the Reconnaissance General Bureau (RGB) 3rd Bureau. This group primarily targets defense, aerospace, nuclear, and engineering entities to obtain sensitive technical data to advance North Korea's military and nuclear programs. The actors gain initial access through exploitation of public-facing web servers, move laterally using remote access tools, and exfiltrate data over alternative protocols. They also conduct ransomware operations against healthcare entities to fund their espionage activities.",
  "published": "2024-07-25T17:26:42+00:00",
  "created_at": "2024-07-25T17:26:42+00:00",
  "modified_at": "2024-07-25T18:29:04+00:00",
  "created_at_opencti": "2024-07-25T17:26:42+00:00",
  "author": "",
  "confidence": null,
  "report_types": [],
  "labels": [],
  "tags": [
    "2024-07-25",
    "cisa"
  ],
  "related_entities": {
    "observables": [
      {
        "id": "",
        "name": "f1856188732f05612c7c05347463109e8fc0e11a3d2604196551d90b4f846513"
      },
      {
        "id": "",
        "name": "def2f01fbd4be85f48101e5ab7ddd82efb720e67daa6838f30fd8dcda1977563"
      },
      {
        "id": "",
        "name": "ce779e30502ecee991260fd342cc0d7d5f73d1a070395b4120b8d300ad11d694"
      },
      {
        "id": "",
        "name": "c419f17b54d5b1dd356af3703e1c31064720521337abed3ffecfed0884d1e235"
      },
      {
        "id": "",
        "name": "c1a09024504a5ec422cbea68e17dffc46472d3c2d73f83aa0741a89528a45cd1"
      },
      {
        "id": "",
        "name": "b7435d23769e79fcbe69b28df4aef062685d1a631892c2354f96d833eae467be"
      },
      {
        "id": "",
        "name": "b2cec2d6992bf41d2bab643968691e06722f830fc38f7776238fe88a1f892404"
      },
      {
        "id": "",
        "name": "8c7d20b705d0a96c115f10dbd53268defdefeee207ea9c235eae1b23bb2b0c84"
      },
      {
        "id": "",
        "name": "8cd16feb7318c0de3027894323a0ccaacb527e071aa4c4b691feb411b6bd0937"
      },
      {
        "id": "",
        "name": "7f904d16371b40e24495d9cc91019a54a3f257129896db1698282a187dfd8808"
      },
      {
        "id": "",
        "name": "7e9b7ebf36cfbd4b59b77fba3bba1bac0b8d2ac657530d945fd41c15937f0bb3"
      },
      {
        "id": "",
        "name": "799d44f51e6ea84998d96570e8b597af82601260fada14bd7f08391e403bc02a"
      },
      {
        "id": "",
        "name": "74529dd15d1953a47f0d7ecc2916b2b92865274a106e453a24943ca9ee434643"
      },
      {
        "id": "",
        "name": "66415464a0795d0569efa5cb5664785f74ed0b92a593280d689f3a2ac68dca66"
      },
      {
        "id": "",
        "name": "658c25c5c9ed34cd7835b7efc5f75b0cbb9a7f6b96a6922fce077e78aa5b08b4"
      },
      {
        "id": "",
        "name": "5f71d7511bdd0b236d05b35396eddc20eae57ab2561f09ff62f212f32ef310cc"
      },
      {
        "id": "",
        "name": "4e5e42b1acb0c683963caf321167f6985e553af2c70f5b87ec07cc4a8c09b4d8"
      },
      {
        "id": "",
        "name": "4aadf767491077ab83c6436cf108b014fc0bf8c3bd01cc6087a0f2b80564bc08"
      },
      {
        "id": "",
        "name": "452ca47230afd4bb85c45af54fcacbfa544208ef8b4604c3c5caefe3a64dcc19"
      },
      {
        "id": "",
        "name": "3dffb684333ea8f036e0d2142d1f49ebeccb28806cf6407308a88e846f8f30ec"
      },
      {
        "id": "",
        "name": "3d4ee28dd88e4f9a6647789edbfac38dd99821ca1bdcb6fe1d3df6dc80287462"
      },
      {
        "id": "",
        "name": "323cbe7a3d050230cfaa822c2a22160b4f8c5fe65481dd329841ee2754b522d9"
      },
      {
        "id": "",
        "name": "2eb16dbc1097a590f07787ab285a013f5fe235287cb4fb948d4f9cce9efa5dbc"
      },
      {
        "id": "",
        "name": "2a1b556770982acd711188821bfd90bb7a3eb2a977232303d7e64ba0b8682934"
      },
      {
        "id": "",
        "name": "1e4de822695570421eb2f12fdfe1d32ab8639655e12180a7ab3cf429e7811b8f"
      },
      {
        "id": "",
        "name": "199ba618efc6af9280c5abd86c09cdf2d475c09c8c7ffc393a35c3d70277aed1"
      },
      {
        "id": "",
        "name": "1962ebb7bf8d2b306c6f3b55c3dcd69a755eeff1a17577b7606894b781841c3a"
      },
      {
        "id": "",
        "name": "17085ef59c256aabae656311399575ceb2cf7e2e904255ac4c920fab9d5215e1"
      },
      {
        "id": "",
        "name": "16db0063e4aa666d94752414549fa09fb33142481d894b01a0fae45b339a09fb"
      },
      {
        "id": "",
        "name": "02135f60f3edff0b9baa4c20715ee6a80c94f282079bf879265f5e020d37cf88"
      },
      {
        "id": "",
        "name": "6db57bbc2d07343dd6ceba0f53c73756af78f09fe1cb5ce8e8008e5e7242eae1"
      },
      {
        "id": "",
        "name": "664f8d19af3400a325998b332343a9304f03bab9738ddab1530869eff13dae54"
      },
      {
        "id": "",
        "name": "40da2329b2b81f237fc30d2274529e6fda4364516b78b4b88659c572fbc4bc02"
      },
      {
        "id": "",
        "name": "0996a8e5ec1a41645309e2ca395d3a6b766a7c52784c974c776f258c1b25a76c"
      },
      {
        "id": "",
        "name": "0995f1f2e4bb43ef7e3dcd57c06154fc812394ac214861c5e30084a215018dbe"
      },
      {
        "id": "",
        "name": "3ec2292dc5be0161d25f258f716d92e96c591ab084548679dd7b169f80b2e967"
      },
      {
        "id": "",
        "name": "9f90670d2197496f7d9d20152fe822238d9806716baf55c0078eef937dc8dfdb"
      },
      {
        "id": "",
        "name": "9033a46f756fa5225ed30692317d92b31fa5b23fa4587caa87172031efa25e12"
      },
      {
        "id": "",
        "name": "4a87fc2f9da25152bf26fff375dd9a18e81eeb78c2b5c5babcc04dc93371d0aa"
      },
      {
        "id": "",
        "name": "3bb8445c95142da1bda0e3440b53cc70e05a3fe996a77e6dcfb2919fd8878ca9"
      },
      {
        "id": "",
        "name": "048698159bbb051af779d22eb5b1282ce895e8311d641d50cc23cbfd36cc020a"
      },
      {
        "id": "",
        "name": "e830c677d51668133fbea5d900b7a8e0d8cdfed0a396f50be314c0591bf71f74"
      },
      {
        "id": "",
        "name": "d14447f41d11e0ed192d9161a60cee139fe8b01d921bbdff56abc01a5a653161"
      },
      {
        "id": "",
        "name": "c2500a6e12f22b16e221ba01952b69c92278cd05632283d8b84c55c916efe27c"
      },
      {
        "id": "",
        "name": "9ac31ce26749874b8f9e080cbe10e6d9c4d0fa9c8edb17685291e031d7f82949"
      },
      {
        "id": "",
        "name": "8daa6b20caf4bf384cc7912a73f243ce6e2f07a5cb3b3e95303db931c3fe339f"
      },
      {
        "id": "",
        "name": "7339cfa5a67f5a4261c18839ef971d7f96eaf60a46190cab590b439c71c4742b"
      },
      {
        "id": "",
        "name": "5758765a59abfdf5e255df4d0447f92132891d1b325faaa2fb155ebb41cba818"
      },
      {
        "id": "",
        "name": "3098e6e7ae23b3b8637677da7bfc0ba720e557e6df71fa54a8ef1579b6746061"
      },
      {
        "id": "",
        "name": "f67ee77d6129bd1bcd5d856c0fc5314169b946d32b8abaa4e680bb98130b38e7"
      },
      {
        "id": "",
        "name": "d68036a30b99e8beba1c3aa52b6c5986eee823c21699a24d9af7022eaa9190ac"
      },
      {
        "id": "",
        "name": "c2904dc8bbb569536c742fca0c51a766e836d0da8fac1c1abd99744e9b50164f"
      },
      {
        "id": "",
        "name": "90fb0cd574155fd8667d20f97ac464eca67bdb6a8ee64184159362d45d79b6a4"
      },
      {
        "id": "",
        "name": "8ce219552e235dcaf1c694be122d6339ed4ff8df70bf358cd165e6eb487ccfc5"
      },
      {
        "id": "",
        "name": "f226086b5959eb96bd30dec0ffcbf0f09186cd11721507f416f1c39901addafb"
      },
      {
        "id": "",
        "name": "8aa6612c95c7cef49709596da43a0f8354f14d8c08128c4cb9b1f37e548f083b"
      },
      {
        "id": "",
        "name": "38f0f2d658e09c57fc78698482f2f638843eb53412d860fb3a99bb6f51025b07"
      },
      {
        "id": "",
        "name": "45d8ac1ac692d6bb0fe776620371fca02b60cac8db23c4cc7ab5df262da42b78"
      },
      {
        "id": "",
        "name": "dda53eee2c5cb0abdbf5242f5e82f4de83898b6a9dd8aa935c2be29bafc9a469"
      },
      {
        "id": "",
        "name": "18b75949e03f8dcad513426f1f9f3ca209d779c24cd4e941d935633b1bec00cb"
      }
    ],
    "malware": [
      {
        "id": "e0d2e1a0-7d23-46a7-b3a5-f36946200993",
        "name": "DLang",
        "slug": "dlang"
      },
      {
        "id": "8d92e797-bfb7-4d52-b555-dc846b85f671",
        "name": "NineRAT",
        "slug": "ninerat"
      },
      {
        "id": "8a5b5833-c01a-4812-a863-46e76727868d",
        "name": "BottomLoader",
        "slug": "bottomloader"
      },
      {
        "id": "6a0cbc8f-906e-4e5a-8f51-1fa2a1f9eef6",
        "name": "Andariel Scheduled Task Malware",
        "slug": "andariel-scheduled-task-malware"
      },
      {
        "id": "5c82a55c-c06e-4183-b9aa-a99acf0077da",
        "name": "Preft",
        "slug": "preft"
      },
      {
        "id": "678c7bf8-47c9-4e14-b1c6-308289d3ed61",
        "name": "KaosRAT",
        "slug": "kaosrat"
      },
      {
        "id": "9fe66df9-128e-47e2-8469-801e0aba3740",
        "name": "Trifaux",
        "slug": "trifaux"
      },
      {
        "id": "867228eb-831b-4ad2-bafc-f3e25e7e07a2",
        "name": "Black RAT",
        "slug": "black-rat"
      },
      {
        "id": "750470b4-b0ec-4e0b-89cc-48cb4ee428ac",
        "name": "Goat RAT",
        "slug": "goat-rat"
      },
      {
        "id": "5f6f3458-d9d0-48cb-91da-04857de04653",
        "name": "YamaBot",
        "slug": "yamabot"
      },
      {
        "id": "907efbe8-49b5-40f1-ad96-b749586e4fbd",
        "name": "ValidAlpha",
        "slug": "validalpha"
      },
      {
        "id": "47c0c0f4-9856-4173-bf81-7ea4829bee6c",
        "name": "Valefor/VSingle",
        "slug": "valeforvsingle"
      },
      {
        "id": "2697bf24-a718-4c61-8908-aaeb05da9311",
        "name": "No Pineapple",
        "slug": "no-pineapple"
      },
      {
        "id": "dab80797-f0dd-4d53-8ba4-6232e24dc306",
        "name": "MagicRAT",
        "slug": "magicrat"
      },
      {
        "id": "4a1984a3-b5d7-4d82-956b-70eed93d2cd0",
        "name": "Jupiter",
        "slug": "jupiter"
      },
      {
        "id": "26cda8cb-080d-4e36-b72c-57d5414c61b9",
        "name": "ELF Backdoor",
        "slug": "elf-backdoor"
      },
      {
        "id": "f78715f6-01d8-4dc1-924f-7a0688a0e476",
        "name": "Atharvan",
        "slug": "atharvan"
      },
      {
        "id": "28b4180f-5a72-4f41-83bc-8dd5caaf9f3a",
        "name": "DurianBeacon",
        "slug": "durianbeacon"
      },
      {
        "id": "b408e995-feda-44d8-aa87-9103e6ad8089",
        "name": "Nestdoor",
        "slug": "nestdoor"
      },
      {
        "id": "d91c85f5-ee93-46ec-8930-4118835fe8ed",
        "name": "AndarLoader",
        "slug": "andarloader"
      },
      {
        "id": "4112936b-8a11-4ed5-9426-50f08dad9ed3",
        "name": "TigerRAT",
        "slug": "tigerrat"
      },
      {
        "id": "3e0793e7-3931-4e09-98d0-3dfb0fadb991",
        "name": "NukeSped",
        "slug": "nukesped"
      }
    ],
    "intrusion_sets": [
      {
        "id": "64af6ec8-9002-49ef-bc67-356f287748c3",
        "name": "Andariel",
        "slug": "andariel"
      }
    ],
    "attack_patterns": [
      {
        "id": "9d966bc9-26cc-42dc-a9a7-fce61a440dae",
        "name": "T1596"
      },
      {
        "id": "ab179192-1c1a-4b7d-9792-b608a9459b71",
        "name": "T1591"
      },
      {
        "id": "5d2af906-6187-4702-ab9f-590fbe5b1ca3",
        "name": "T1021.002"
      },
      {
        "id": "3e7e47ba-d8ad-4aa8-a4fc-1167cec2e125",
        "name": "T1587.001"
      },
      {
        "id": "a1de6d30-7fd6-4352-8f6c-d9904347f33f",
        "name": "T1039"
      },
      {
        "id": "cfe2a7bc-f591-4e16-9f77-edcc2d39a53e",
        "name": "T1587.004"
      },
      {
        "id": "0ca071fb-4f52-4672-b64a-75deff57d874",
        "name": "T1048"
      },
      {
        "id": "a2ba5594-6293-4868-928c-ab4b31927a02",
        "name": "T1572"
      },
      {
        "id": "232fbdfa-94c6-443d-b575-373e75b4f4c2",
        "name": "T1567"
      },
      {
        "id": "6efb8bea-11d7-418d-a429-9f4a3e6c50f6",
        "name": "T1087"
      },
      {
        "id": "fc699aef-8931-4a79-8f79-9651be9abd50",
        "name": "T1021"
      },
      {
        "id": "45082a8e-9c79-470e-ad1b-decac7188e8f",
        "name": "T1083"
      },
      {
        "id": "dc342445-1b78-48b4-aa06-89ed2ad7c28e",
        "name": "T1071"
      },
      {
        "id": "d570881a-1f73-41ca-ad6c-fc29256c76f9",
        "name": "T1595"
      },
      {
        "id": "29f7ff93-033b-4f8d-8691-5bcaa438c80f",
        "name": "T1592"
      },
      {
        "id": "0c836307-129e-4ff7-a532-180c633cacba",
        "name": "T1027"
      },
      {
        "id": "31d29704-da1c-47ea-b93f-76d368813bdf",
        "name": "T1560"
      },
      {
        "id": "6c8f8a40-2746-4a37-86bd-81e82afa6e62",
        "name": "T1190"
      },
      {
        "id": "ca53b2fa-42a8-45ec-9682-0cf54bf280f3",
        "name": "T1090"
      },
      {
        "id": "74d6e294-54d1-4a21-9dfc-df5870f8ec8e",
        "name": "T1003"
      },
      {
        "id": "9b6064e6-a05b-4e95-baf5-34d180bc9221",
        "name": "T1059"
      }
    ],
    "others": [
      {
        "id": "",
        "name": "Engineering"
      },
      {
        "id": "",
        "name": "Nuclear"
      },
      {
        "id": "",
        "name": "Aerospace"
      },
      {
        "id": "",
        "name": "Healthcare"
      },
      {
        "id": "",
        "name": "Energy"
      },
      {
        "id": "",
        "name": "Defense"
      },
      {
        "id": "",
        "name": "Government"
      },
      {
        "id": "",
        "name": "Manufacturing"
      }
    ]
  },
  "external_refs": [
    "https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-207a",
    "https://otx.alienvault.com/pulse/66a2a6f2ab2341036db97160"
  ]
}