North Korean gov’t hackers targeted aerospace company in Spain

Hackers connected to a notorious group Lazarus within the North Korean government launched an attack against an aerospace company in Spain, according to researchers at security company ESET.

Employees of the unnamed company were sent messages on LinkedIn from a fake Meta recruiter and tricked into opening malicious files that purported to be coding quizzes or challenges. (spearphishing)

When opened, the files infect a victim’s device with a backdoor that would allow the hackers to conduct espionage, according to ESET.

“The most worrying aspect of the attack is the new type of payload, LightlessCan, a complex and possibly evolving tool that exhibits a high level of sophistication in its design and operation, and represents a significant advancement in malicious capabilities compared to its predecessor, BlindingCan,” said ESET researcher Peter Kálnai, who made the discovery.