threatintel
actor tracker
Andariel
Advisoryseverity: High2024-07-25

Joint advisory AA24-207A attributes IP theft to DPRK Andariel

published by CISA
Actor
AndarielKP · DPRKAPT

DPRK state-sponsored intrusion set publicly attributed to the Reconnaissance General Bureau's 3rd Bureau (Andariel). Treated by MITRE as a sub-cluster of Lazarus Group; conducts both espionage agains…

Summary

CISA, the FBI, the NSA, and partners from the U.K., South Korea, Germany, and others released a joint advisory attributing a long-running cyberespionage campaign against critical-infrastructure research — defense, aerospace, nuclear, and engineering — to North Korea's Reconnaissance General Bureau 3rd Bureau, also tracked as Andariel and APT45.

Tags

five-eyesattributiondprkip-theft

Primary source

cisa.gov