Tag: defense industry

3 Attack Reports | 0 Vulnerabilities

Attack reports

Gotta fly: Targeting the UAV sector

ESET researchers have uncovered a new instance of Operation DreamJob, a cyberespionage campaign attributed to the North Korea-aligned Lazarus group. The attackers targeted European companies in the defense industry, particularly those involved in unmanned aerial vehicle (UAV) technology. The campai…
social engineering
north korea
cyberespionage
defense industry
trojanized software
scoringmathtea
quanpinloader
operation dreamjob
2025-11-09
uav
binmergeloader
Published: November 9, 2025
Downloadable IOCs: 0

Dropping Elephant APT Group Targets Turkish Defense Industry With New Campaign and Capabilities: LOLBAS, VLC Player, and Encrypted Shellcode

The Arctic Wolf Labs team has uncovered a new cyber-espionage campaign by the Dropping Elephant APT group targeting Turkish defense contractors. The attack leverages a five-stage execution chain delivered via malicious LNK files disguised as conference invitations. It uses legitimate binaries like …
apt
powershell
shellcode
dll side-loading
cyber-espionage
turkey
defense industry
2025-07-23
vlc player
dropping elephant rat
Published: July 23, 2025
Linked vulnerabilities : CVE-2025-5777 (CVSS 9.3), CVE-2025-20337 (CVSS 10.0), CVE-2025-53770 (CVSS 9.8)
Downloadable IOCs: 10

Operation HollowQuill: Russian R&D Networks Targeted via Decoy PDFs

Operation HollowQuill targets Russian research and defense networks, particularly the Baltic State Technical University, using weaponized decoy documents disguised as research invitations. The attack chain involves a malicious RAR file containing a .NET dropper, which deploys a Golang-based shellco…
cobalt strike
2025-03-31
defense industry
shellcode loader
russian r&d
decoy pdfs
academic institutions
baltic state technical university
operation hollowquill
Published: March 31, 2025
Downloadable IOCs: 2
Click here to see more Attack Reports