韓獨 합동 사이버 보안 권고문(北 방산분야 해킹)
2024-02-19 • KRNCSC • Korea-China joint cyber security advisory (North Korean defense industry hacking) •
Attachments
South Korea's National Intelligence Service and Germany's Federal Office for the Protection of the Constitution issued a joint advisory on North Korean cyber threats against defense-industry companies and research institutes. The advisory says North Korea uses cyber espionage as a low-cost way to acquire weapons technology for conventional-force modernization, ballistic missiles, reconnaissance satellites, submarines, and other strategic weapons. It attributes two representative defense-sector intrusion cases to Lazarus and other North Korean hacking organizations, and includes TTPs and indicators to help prevent similar compromises.
Indicators of Compromise
| Type | Value | First Seen | Last Seen |
|---|---|---|---|
| YARA | operation_DREAMJOB_AMAZON_VNC | 2024-02-19 | 2024-02-19 |
| HASH | 47999fa014b6cc5a2a71be590c938303 | 2024-02-19 | 2024-02-19 |
| HASH | 71e259242dfdba7ffa2698f1900919ec | 2024-02-19 | 2024-02-19 |
| HASH | 4631ef8db9c36b0f2534ac7193f2587e | 2024-02-19 | 2024-02-19 |
| HASH | 3eb6372d9abe8709b8ad8cc125a6d0d… | 2024-02-19 | 2024-02-19 |
| HASH | f3482a38befdcd7d0b87d86f24cdb209 | 2024-02-19 | 2024-02-19 |
| HASH | 028bd8471baa6610548fb721086f5b85 | 2024-02-19 | 2024-02-19 |
| HASH | 7da62cdb447a7ae3ae7b5f67a511e7c… | 2024-02-19 | 2024-02-19 |
| HASH | 2e0d374f1e706ae1fa24558b54c5a16… | 2024-02-19 | 2024-02-19 |
| HASH | 4576a83dee4146cc694cf57f57587a8… | 2024-02-19 | 2024-02-19 |
| HASH | 607a2a8d2863c3144b8e901a16a76c33 | 2024-02-19 | 2024-02-19 |
| HASH | 0d2aa794716351491fff99c2977ce34… | 2024-02-19 | 2024-02-19 |
| HASH | 7a10c12b381b0e85d621700cfded5dc… | 2024-02-19 | 2024-02-19 |
| HASH | 6ff2304b9f31d8dd6c96f3ceb1a3166… | 2024-02-19 | 2024-02-19 |
| HASH | 6abe87243fae71d232e5247915af5f9… | 2024-02-19 | 2024-02-19 |
| HASH | 294706ae0585abaf4e6c5e66a7f5141… | 2024-02-19 | 2024-02-19 |
| HASH | e53cc5b2e2964e603f40460a799de03… | 2024-02-19 | 2024-02-19 |
| URL | https://sifucanva.com/wp- | 2024-02-19 | 2024-02-19 |
| DOMAIN | chrysalisc.com | 2024-02-19 | 2024-02-19 |
| DOMAIN | sifucanva.com | 2024-02-19 | 2024-02-19 |
| DOMAIN | connection.lockscreen.kro.kr | 2024-02-19 | 2024-02-19 |
| DOMAIN | updating.dothome.co.kr | 2024-02-19 | 2024-02-19 |
| DOMAIN | job4writers.com | 2024-02-19 | 2024-02-19 |
| DOMAIN | rginfotechnology.com | 2024-02-19 | 2024-02-19 |
| DOMAIN | thefrostery.co.uk | 2022-05-05 | 2024-02-19 |