Report_011325_Strike_Operation99.pdf
Excerpt
North Korean State Sponsored Supply Chain Attack on Tech Innovation
Executive Summary
The SecurityScorecard STRIKE team has uncovered an ongoing cyberattack targeting software developers, orchestrated by the Lazarus Group, a North Korean state-sponsored hacking unit. Identified on January 9th and named Operation 99, this campaign builds on tactics seen in past Lazarus operations, such as the 2021 Operation Dream Job, but with a sharper focus on infiltrating development environments.
Unlike the fake job descriptions aimed at defense contractors in Operation Dream Job, Operation 99 targets developers in Web3 and cryptocurrency fields. Attackers pose as recruiters on platforms like LinkedIn, enticing victims with project tests or code reviews. Victims are tricked i…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by SecurityScorecard on securityscorecard.com.
Mentioned in the excerpt
More from SecurityScorecard8
- Resources - SecurityScorecardSecurityScorecard · Added 25 Oct
- Resources - SecurityScorecardSecurityScorecard · Added 18 Oct
- A Deep Dive into Medusa RansomwareSecurityScorecard · Added 29 Oct 2025
- How to Analyze Java Malware – A Case Study of STRRATSecurityScorecard · Added 18 Jul 2025
On the same topics
- Retrohunting APT37: North Korean APT used VBA self decode technique to inject RokRatMalwarebytes · Published 5 Jan 2021
- Kazuar (Malware Family)Malpedia · Added 18 Oct
- Chinese Nation-State Hackers Target U.S in Operation TradeSecret, Report Claimseweek.com · Published 6 Apr 2017
- Taiwan High-Tech Ecosystem Targeted by Foreign APT Group:Medium · Published 10 Jun 2022
