#Inception

Incident/Operation

2020-06-17 • Operation In(ter)ception: Aerospace and military companies in the crosshairs of cyberspies

Operation In(ter)ception is a Lazarus social-engineering campaign that has targeted aerospace, defense, technology, and other professionals with fabricated job opportunities since at least 2019. Operators impersonated recruiters and recognizable employers on LinkedIn or by email, then delivered malicious archives, shortcut files, or signed applications disguised as recruitment material. The resulting intrusions used living-off-the-land execution, remote scripts, services or LaunchAgents for persistence, system discovery, data staging, and exfiltration; observed objectives centered on cyberespionage and sensitive-data theft, with some access later monetized through business email compromise.

Tagged Reports

« Back