Defense industry organizations in South Korea had data concerning anti-aircraft weapon systems exfiltrated by North Korean state-sponsored threat operation Andariel, a sub-cluster of Lazarus Group, reports The Record, a news site by cybersecurity firm Recorded Future. Andariel, which leveraged a South Korean domestic server rental firm connected to a Pyongyang-based server to facilitate the intrusions, was able to steal 1.2 TB of data, some of which had been obtained from pharmaceutical firms and research entities, according to the Seoul Metropolitan Police, which investigated the attack campaign with the FBI.

Source: SC Magazine