North Korean APT Group GoldenJackal Leverages Two Novel Tools for Compromising Air-Gapped Systems

cisa.gov

North Korean APT Group GoldenJackal Leverages Two Novel Tools for Compromising Air-Gapped Systems - 2d

ESET researchers have uncovered two sophisticated toolsets developed by the North Korean APT group, GoldenJackal, specifically designed to compromise air-gapped systems. These toolsets, never before seen in the wild, highlight the group’s resourcefulness and commitment to targeting government and diplomatic entities in Europe, the Middle East, and South Asia. The advanced nature of these tools suggests that GoldenJackal has invested significant resources in developing specialized capabilities to bypass conventional security measures. This discovery underscores the importance of maintaining robust security protocols for critical infrastructure and sensitive data, especially in the face of persistent and sophisticated nation-state threats.

References:

@feeds - CySec.Social mentions the CISA and FBI fact sheet on Iranian targeting. - 6d
@patrickcmiller - Infosec.Exchange highlights the CISA and FBI fact sheet on Iranian targeting. - 6d
All CISA Advisories - CISA and the FBI jointly release a fact sheet on Iranian government-backed hacking groups targeting political accounts. - 6d
Malware Analysis, News and Indicators - GoldenJackal Targets Embassies, Steals Data from Air-Gapped Systems - 6d
Security Boulevard - GoldenJackal Targets Embassies, Steals Data from Air-Gapped Systems - 6d
SCM feed for Security Strategy, Plan, Budget - GoldenJackal Threat Group Targets Air-Gapped Government Systems - 6d
Ars Technica - Two never-before-seen tools from same group infect air-gapped devices - 5d
@VirusBulletin - ESET's Matías Porolli analyses two separate toolsets for breaching air-gapped systems, used by a cyberespionage threat actor known as GoldenJackal. The APT group targets government and diplomatic entities in Europe, the Middle East & South Asia. - 5d

Classification:

HashTags: #APT #GoldenJackal #AirGapped
Company: ESET
Target: Government and Diplomatic Entities
Attacker: GoldenJackal
Product: Tools
Feature: Air-Gapped System Compromise
Type: Espionage
Severity: Major

Flag This

North Korean APT Group GoldenJackal Leverages Two Novel Tools for Compromising Air-Gapped Systems - 2d