North Korean hackers attacked the German manufacturer of Iris-T missiles

North Korean hackers launched a cyberattack on the German company Diehl Defense, which specializes in the production of weapons, including Iris-T missiles. This is reported by Spiegel, reports UNN.

Details

According to experts, the attack was organized by the “Kimsuky” hacker group, which works in favor of the North Korean government. This attack was discovered by experts from the American cyber security company Mandiant, which is part of Google.

Hackers tried to trick Diehl Defense employees into opening malicious PDF files through fake job offers on behalf of major US defense suppliers. Clicking on the fake file infected the computer with malware, which allowed attackers to spy on users.

To disguise their activities, the hackers used a server named “Uberlingen” after the location of the Diehl Defense office in Germany. They also created fake pages to steal user data that mimicked German services such as Telekom and GMX.

Experts from Mandiant note that “Kimsuky” carefully prepared for the attack, collecting information about German companies and their employees. Germany’s Federal Office for Information Security (BSI) has confirmed that it is tracking the activities of this hacking group, known as APT43, and warned of possible attacks on other organizations in the country.

In Germany, Russian military intelligence was accused of cyber attacks on the EU and NATOSeptember 9, 2024, 09:44 • 11553 views