US CISA published an alert related to a new North Korean malware, dubbed BLINDINGCAN, used in attacks on the US defense and aerospace sectors. The attack chain is similar to the one used in past campaigns, threat actors pose as recruiters at big corporations to establish contact with employees at the target organizations. The attackers use job postings as bait to trick victims into opening weaponized Office or PDF documents that are used to deploy malware on the victims computers. Some of the attacks were attributed by the researchers to cyber espionage campaigns tracked as Operation North Star and Operation Dream Job.”]
Source: https://securityaffairs.co/wordpress/107339/malware/blindingcan-rat-north-korea.html