Science & Tech · Cybersecurity · 1 hr ago
Lazarus hackers target European drone industry, ESET says
ESET says the North Korea-linked Lazarus group resumed cyber espionage against Europe’s drone industry around June.
The targets included European drone makers and key suppliers, according to the cybersecurity company.
Hackers reportedly approached defence industry employees with fake, high-paying job offers and sent files designed to install malicious software when opened.
ESET said the campaign may be aimed at gaining drone technology and manufacturing know-how for North Korea.
The company linked the activity to the growing role of drones in the war in Ukraine, where tactics and technologies are being developed and tested.
It is not known what information, if any, was stolen, and no further steps are specified.
ESET says the Lazarus hacking group resumed cyber-espionage activity targeting Europe’s drone industry around June.
Targets included European drone makers and key suppliers.
The group reportedly used fake job offers to approach employees at defence companies.
ESET said the activity may aim to help North Korea gain drone knowledge and manufacturing capabilities.
The report did not disclose what technical information, if any, was stolen.
- Who
- The Lazarus hacking group, which is linked to North Korea, targeted European drone businesses.
- What
- It carried out cyber-espionage activity and reportedly used fake job offers to approach defence-company employees.
- When
- The activity began around June this year, according to ESET.
- Where
- Drone manufacturers and key suppliers in Europe were targeted.
- Why
- ESET assessed that North Korea may be seeking drone knowledge and manufacturing processes to develop its own production capabilities.
This story does not have two clearly opposing sides.
ESET said Lazarus appeared to have carried out cyberattacks against three European companies connected to unmanned aircraft.
ESET said Lazarus began espionage activity targeting drone technology and related supply chains.
- Activity began
- Around June 2026
- Targeted sector
- European drone industry
- Targeted organisations
- Drone manufacturers and key suppliers
- Reported approach
- Fake job offers to defence-company employees
- Previous activity
- Attacks on three European unmanned-aircraft companies from late March 2025 onwards