韓獨 합동 사이버 보안 권고문(北 방산분야 해킹)
2024-02-19 • KRNCSC • Korea-China joint cyber security advisory (North Korean defense industry hacking) •
Attachments
South Korea's National Intelligence Service and Germany's Federal Office for the Protection of the Constitution issued a joint advisory on North Korean cyber threats against defense-industry companies and research institutes. The advisory says North Korea uses cyber espionage as a low-cost way to acquire weapons technology for conventional-force modernization, ballistic missiles, reconnaissance satellites, submarines, and other strategic weapons. It attributes two representative defense-sector intrusion cases to Lazarus and other North Korean hacking organizations, and includes TTPs and indicators to help prevent similar compromises.
Indicators of Compromise
| Type | Value | First Seen | Last Seen |
|---|---|---|---|
| YARA | operation_DREAMJOB_AMAZON_VNC | 2024-02-19 | 2024-02-19 |
| HASH | 47999fa014b6cc5a2a71be590c938303 | 2024-02-19 | 2024-02-19 |
| HASH | 71e259242dfdba7ffa2698f1900919ec | 2024-02-19 | 2024-02-19 |
| HASH | 4631ef8db9c36b0f2534ac7193f2587e | 2024-02-19 | 2024-02-19 |
| HASH | ac9021eb798de8323702a5aeb7c590f… | 2024-02-19 | 2024-02-19 |
| HASH | f3482a38befdcd7d0b87d86f24cdb209 | 2024-02-19 | 2024-02-19 |
| HASH | 028bd8471baa6610548fb721086f5b85 | 2024-02-19 | 2024-02-19 |
| HASH | 7da62cdb447a7ae3ae7b5f67a511e7c… | 2024-02-19 | 2024-02-19 |
| HASH | 2e0d374f1e706ae1fa24558b54c5a16… | 2024-02-19 | 2024-02-19 |
| HASH | 7906270679014234b70aa63dd89e828… | 2024-02-19 | 2024-02-19 |
| HASH | 607a2a8d2863c3144b8e901a16a76c33 | 2024-02-19 | 2024-02-19 |
| HASH | 7b4d0d8e3bfcd634bc7d7a17fb546b7… | 2024-02-19 | 2024-02-19 |
| HASH | 3c2aa3687ac9f466ce909e2cb12b07a5 | 2024-02-19 | 2024-02-19 |
| HASH | d5c8edb84e4ff33aea8865676ffe801… | 2024-02-19 | 2024-02-19 |
| HASH | 3bc8acdd07c6d91652101d9c8b3326b… | 2024-02-19 | 2024-02-19 |
| HASH | 294706ae0585abaf4e6c5e66a7f5141… | 2024-02-19 | 2024-02-19 |
| HASH | 127ced578e041f53b5988a7fefaa6e0… | 2024-02-19 | 2024-02-19 |
| URL | https://sifucanva.com/wp- | 2024-02-19 | 2024-02-19 |
| DOMAIN | chrysalisc.com | 2024-02-19 | 2024-02-19 |
| DOMAIN | sifucanva.com | 2024-02-19 | 2024-02-19 |
| DOMAIN | connection.lockscreen.kro.kr | 2024-02-19 | 2024-02-19 |
| DOMAIN | updating.dothome.co.kr | 2024-02-19 | 2024-02-19 |
| DOMAIN | job4writers.com | 2024-02-19 | 2024-02-19 |
| DOMAIN | rginfotechnology.com | 2024-02-19 | 2024-02-19 |
| DOMAIN | thefrostery.co.uk | 2022-05-05 | 2024-02-19 |