ZDF and Spiegel reporting says North Korea-linked Kimsuky targeted the German defense company Diehl Defence in an espionage operation. The archived evidence describes fake job offers carrying spyware, credential-theft attempts, and a spoofed Diehl Defence-themed site with a Telekom-style login portal intended to capture usernames and passwords. Mandiant researchers are cited observing Kimsuky interest in German registration and telephone-number details, supporting an assessment of preparation for Germany-focused targeting. The report frames the activity as intelligence collection against military technology and related organizations rather than financially motivated crime.