CyberSum logo
Back

Lazarus Group Targets UAV Tech Firms with Operation DreamJob

Cyber Security News by CyberSum.net
9 sources
The Lazarus group has launched a sophisticated cyberespionage campaign targeting defense contractors specializing in unmanned aerial vehicle (UAV) technology. The campaign, known as Operation DreamJob, uses social engineering tactics disguised as job offers to deliver malware. The attacks, which occurred between March and August 2025, aimed to steal proprietary manufacturing data and design specifications. The group employed advanced techniques such as DLL side-loading and trojanized open-source projects to evade detection. The campaign's success highlights the need for improved employee awareness and security training in sensitive sectors.

Also Read

TruffleNet: Cloud Credential Abuse for BEC Fraud

Fortinet’s FortiGuard Labs identified a widespread cloud abuse campaign, TruffleNet, exploiting stolen AWS credentials for large-scale Business Email Compromise (BEC) and email fraud. The campaign leverages over 800 unique hosts across 57 networks, showcasing advanced automation and operational discipline. Attackers use tools like TruffleHog and Portainer to validate credentials and orchestrate fraudulent activities, resulting in significant financial losses and data breaches.

By Cyber Security News by CyberSum.net