North Korea Steals Semiconductor Data from South Korean Firms

In a series of cyberattacks, North Korean hackers targeted South Korean chip equipment manufacturers to support weapons program development.

North Korea's hacking groups targeted South Korean chip equipment manufacturers, stealing sensitive data to support its semiconductor production for weapons programs.
The cyberattacks occurred in December and February, exploiting vulnerabilities in internet-exposed servers using 'living off the land' tactics to evade detection.
South Korea's National Intelligence Service (NIS) warns of increased cyber espionage by North Korea amid sanctions and a growing need for semiconductors in its weapons development.
The stolen data includes product design drawings and photographs of facilities, raising concerns over the security of South Korea's semiconductor industry.
South Korea's spy agency has alerted the affected companies and the broader chipmaking industry to bolster cybersecurity measures against potential future attacks.