February 21, 2024

North Korea-linked hackers fake prestigious job listings to target victims

Cybersecurity firm McAfee identifies increasingly sophisticated hacking methods and documents linked to Hidden Cobra

North Korea-linked hackers are continuously refining their tactics in an ongoing phishing campaign that targets defense and aerospace-industry individuals with fake job recruitment offers, researchers from the cybersecurity firm McAfee announced on Wednesday.

A new McAfee report dubs the increased activity between April and June 2020 as "Operation North Star" and describes North Korea-affiliated hackers creating juicy job postings copied and pasted from leading defense contractors. The hackers send those openings to victims "in a very targeted fashion," with indicators mirroring previously identified Hidden Cobra operations -- one of the many industry names for North Korean-linked hackers.