North Korean Hacking Groups Stealing Construction and Machinery Sector Technologies: A Warning
Essential information
- Published
- 06/08/2024 14:12
- Modified
- 06/08/2024 14:35
- Tags
- 2024-08-06 construction cyber attack dorarat espionage machinery north korea trollagent
- Related entities
- 16 observables, 1 intrusion sets (apt), 14 techniques (mitre), 2 malware
Description
South Korea's cybersecurity community, consisting of the National Intelligence Service, Prosecution Service, Police Agency, Defense Security Command, and Cyber Command, among others, warns of the risks posed by North Korean hacking groups' cyber attacks targeting the domestic construction and machinery sectors. The report highlights the attack strategies, techniques, procedures (TTPs), and indicators of compromise (IoCs) employed by these North Korean groups. As North Korea accelerates its regional development initiatives, its party, military, and government entities, as well as hacking groups, are intensifying efforts to obtain unauthorized access to South Korea's construction, machinery, and urban development data to aid in industrial plant construction and local development plans.