The Reveal Platform
Intel Name: Gotta fly: lazarus targets the uav sector
Date of Scan: October 31, 2025
Impact: High
Summary: North Korea-linked Lazarus Group has launched a new wave of Operation DreamJob, targeting European defense companies involved in unmanned aerial vehicle (UAV) development. The campaign uses trojanized open-source GitHub projects and the ScoringMathTea malware to steal proprietary data and manufacturing know-how. This activity likely supports North Korea’s drone technology program expansion and shows Lazarus’s ongoing evolution through new DLL proxying libraries and enhanced evasion techniques.
