← Back to BrewedIntel
adversaryhighCyberespionageSpear PhishingSupply Chain AttackHidden CobraLazarus

Oct 23, 2025 • ESET WeLiveSecurity

Gotta fly: Lazarus targets the UAV sector

ESET researchers have identified a new iteration of the Operation DreamJob cyberespionage campaign attributed to Lazarus, a North Korea-aligned APT group. The...

Source
ESET WeLiveSecurity
Category
adversary
Severity
high

Executive Summary

ESET researchers have identified a new iteration of the Operation DreamJob cyberespionage campaign attributed to Lazarus, a North Korea-aligned APT group. The campaign specifically targets the Unmanned Aerial Vehicle (UAV) sector, suggesting strategic interest in aviation technology and defense-related intellectual property. As a nation-state actor, Lazarus represents a sophisticated threat capable of conducting long-term persistent operations. Organizations in the UAV, aerospace, and defense industries should enhance email security controls, implement robust phishing detection, and conduct regular security awareness training. The campaign's focus on a specialized sector indicates potential espionage objectives related to acquiring sensitive aerospace technologies. Organizations should review network traffic patterns and monitor for indicators of nation-state activity.

Summary

ESET research analyzes a recent instance of the Operation DreamJob cyberespionage campaign conducted by Lazarus, a North Korea-aligned APT group

Published Analysis

ESET researchers have identified a new iteration of the Operation DreamJob cyberespionage campaign attributed to Lazarus, a North Korea-aligned APT group. The campaign specifically targets the Unmanned Aerial Vehicle (UAV) sector, suggesting strategic interest in aviation technology and defense-related intellectual property. As a nation-state actor, Lazarus represents a sophisticated threat capable of conducting long-term persistent operations. Organizations in the UAV, aerospace, and defense industries should enhance email security controls, implement robust phishing detection, and conduct regular security awareness training. The campaign's focus on a specialized sector indicates potential espionage objectives related to acquiring sensitive aerospace technologies. Organizations should review network traffic patterns and monitor for indicators of nation-state activity. ESET research analyzes a recent instance of the Operation DreamJob cyberespionage campaign conducted by Lazarus, a North Korea-aligned APT group ESET research analyzes a recent instance of the Operation DreamJob cyberespionage campaign conducted by Lazarus, a North Korea-aligned APT group

Linked Entities

  • Hidden Cobra
  • Lazarus