North Korea linked Lazarus hackers use fake job offers to target defence firms in India
North Korea linked Lazarus hackers use fake job offers to target defence firms in India
North Korea-linked Lazarus hackers have revived their Operation Dream Job campaign with fake recruiter messages, malicious PDFs and a newly discovered Windows vulnerability. The attacks have targeted defence, aerospace and aviation organisations, including victims in India.
New Delhi: Fake job offers have long been a favourite trick for cybercriminals, and the latest campaign linked to North Korea’s Lazarus group shows why the method still works. A message lands from someone posing as a recruiter, the role looks genuine, the company name is familiar, and there is a PDF carrying what appears to be a proper job description. One click later, the victim may have handed attackers a path into the computer.
Check Point Research says it has tracked a fresh wave of the long-running Operation Dream Job campaign targeting defence, aerospace and aviation professionals, including victims in India. The campaign stands out for its use of a previously unknown Windows flaw, now tracked as CVE-2026-68820, along with a newly identified backdoor named Troy. Microsoft released a fix for the........
