Oct 23, 2025 • ESET WeLiveSecurity
Gotta fly: Lazarus targets the UAV sector
ESET researchers have identified a new iteration of the Operation DreamJob cyberespionage campaign attributed to Lazarus, a North Korea-aligned APT group. The...
Executive Summary
ESET researchers have identified a new iteration of the Operation DreamJob cyberespionage campaign attributed to Lazarus, a North Korea-aligned APT group. The campaign specifically targets the Unmanned Aerial Vehicle (UAV) sector, suggesting strategic interest in aviation technology and defense-related intellectual property. As a nation-state actor, Lazarus represents a sophisticated threat capable of conducting long-term persistent operations. Organizations in the UAV, aerospace, and defense industries should enhance email security controls, implement robust phishing detection, and conduct regular security awareness training. The campaign's focus on a specialized sector indicates potential espionage objectives related to acquiring sensitive aerospace technologies. Organizations should review network traffic patterns and monitor for indicators of nation-state activity.
Summary
ESET research analyzes a recent instance of the Operation DreamJob cyberespionage campaign conducted by Lazarus, a North Korea-aligned APT group
Published Analysis
ESET researchers have identified a new iteration of the Operation DreamJob cyberespionage campaign attributed to Lazarus, a North Korea-aligned APT group. The campaign specifically targets the Unmanned Aerial Vehicle (UAV) sector, suggesting strategic interest in aviation technology and defense-related intellectual property. As a nation-state actor, Lazarus represents a sophisticated threat capable of conducting long-term persistent operations. Organizations in the UAV, aerospace, and defense industries should enhance email security controls, implement robust phishing detection, and conduct regular security awareness training. The campaign's focus on a specialized sector indicates potential espionage objectives related to acquiring sensitive aerospace technologies. Organizations should review network traffic patterns and monitor for indicators of nation-state activity. ESET research analyzes a recent instance of the Operation DreamJob cyberespionage campaign conducted by Lazarus, a North Korea-aligned APT group ESET research analyzes a recent instance of the Operation DreamJob cyberespionage campaign conducted by Lazarus, a North Korea-aligned APT group
Linked Entities
- Hidden Cobra
- Lazarus