North Korean cybercriminals targeted South Korean semiconductor companies in a possible bid to establish domestic capabilities to support Pyongyang’s satellite and missile development, Seoul’s spy agency warned on Monday.

The National Intelligence Service (NIS) said in a press release that an unspecified DPRK threat actor infiltrated the systems of two South Korean firms in December and February and stole product designs and photos of their facilities.

The agency said the cybercriminals targeted the unnamed companies’ servers used to manage documents through “Living off the Land” (LotL) techniques, in which attackers use tools within targets’ systems rather than external