Lazarus Group Intensifies DreamJob Campaign Targeting European Drone Manufacturers

ESET Research has identified a new wave of the DreamJob campaign conducted by the Lazarus Group, a North Korean-aligned APT. This campaign targets European defense companies, particularly those involved in drone and UAV manufacturing, signaling an escalation in cyber espionage efforts against high-value defense targets. The Lazarus Group is known for its sophisticated social engineering tactics, often using fake job offers to deliver malware and exfiltrate sensitive data. The focus on drone manufacturers suggests a strategic interest in acquiring proprietary technology or intelligence related to UAVs, which are critical in modern military operations. This campaign underscores the ongoing threat posed by state-sponsored APT groups to the defense industrial base. Organizations in this sector should enhance their security awareness programs, implement advanced threat detection solutions, and strengthen incident response capabilities to mitigate the risk of such targeted attacks. The intensification of these attacks highlights the need for increased collaboration and threat intelligence sharing among defense contractors and cybersecurity firms to effectively counter these evolving threats.