Lazarus Group Targets UAV Tech Firms in Cyberespionage Campaign

The Lazarus APT group has been attributed to a series of cyberattacks targeting defense contractors specializing in unmanned aerial vehicle (UAV) technology. The campaign, known as Operation DreamJob, utilized social engineering tactics to deliver malware disguised as job offers. The attacks, which occurred between March and August 2025, aimed to steal proprietary manufacturing data and design specifications. The group employed sophisticated techniques, including DLL side-loading and trojanized open-source projects, to evade detection. The campaign's success highlights the need for enhanced employee awareness and security training in sensitive sectors.