North Korean Hackers Weaponize Job Offers Featuring MISTPEN

Amber | Attack Report
Download PDF

Lazarus Group, a North Korea-linked cyber-espionage organization (also known as UNC2970 and TEMP.Hermit), has been observed conducting job-themed phishing campaigns, referred to as "Operation Dream Job," targeting the energy and aerospace sectors. The ultimate objective is the deployment of the MISTPEN backdoor, delivered through the BURNBOOK launcher.