ZeroFox Intelligence Brief - North Korean and Chinese APT Groups Targeting the Aerospace Sector

ZeroFox Intelligence Brief - North Korean and Chinese APT Groups Targeting the Aerospace Sector

Product Serial: B-2023-10-13a

TLP:CLEAR

In this Intelligence Brief, ZeroFox researchers assess the targeting of the aerospace industry over the last two years through cyber espionage efforts.

Standing Intelligence Requirements

Deep Dark Web and Criminal Underground

For the most up-to-date list of ZeroFox’s Intelligence Requirements, please visit:

https://cloud.zerofox.com/intelligence/advisories/14956

Link to Download

View the full report here.

Executive Summary

A series of attacks occurred against the aerospace industry in 2022 and 2023. The attacks were perpetrated by Chinese and North Korean state-advanced persistent threat (APT) groups in what appears to be a broader cyber espionage effort. While the aerospace industry covers a broad spectrum of activities, the focus of these attacks appears to be on the military applications within the sector—emphasizing rocketry and associated products of high intelligence value to both nations. The APT groups to whom the attacks are attributed have an established history of conducting intelligence operations to satisfy their respective nations’ strategic requirements. The focus on the aerospace industry is occurring in a broader geopolitical context.