Operation North Star is a 2020 cyberespionage campaign targeting aerospace and defense personnel and organizations in Australia, India, Israel, and Russia, including defense contractors. Attackers approached prospective victims through social media and spearphishing, using weaponized documents built from authentic-looking defense job advertisements to install data-gathering implants. Compromised European infrastructure supported payload delivery and command and control, while the previously unknown Torisma implant enabled operators to profile victims, select high-value systems for further exploitation, and pursue sensitive defense intellectual property and other confidential information.