news/blog

news

English

SSESS4decf0f010bae5a263354c26060a9ea3

Domain 'www.helpnetsecurity.com' uses the commercial generic top-level domain (.com) and includes subdomain 'www'. The registrable portion 'helpnetsecurity' spans 15 characters holding five vowels versus 10 consonants. Breaking it apart gives 3 words: help, net, security. Median word length comes out to four characters. 'help' most often appears in Dutch. Usage also turns up in Chinese (Pinyin) and English contexts.

html/58/fb/58fb13f4-bddc-4168-b60d-c2036960b0d6_fallback.html.gz

How Lazarus Group used fake job ads to spy on Europe's drone and defense sector - Help Net Security

groups[]

fields[email]

AGREE_TO_TERMS

html/58/fb/58fb13f4-bddc-4168-b60d-c2036960b0d6.html.gz

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

multipart/form-data; boundary=----WebKitFormBoundaryhABEoHP0bKDZAsLq

application/x-www-form-urlencoded; charset=utf-8

Researchers expose large-scale YouTube malware distribution network

Lanscope Endpoint Manager vulnerability exploited in zero-day attacks (CVE-2025-61932)

Critical Adobe Commerce, Magento vulnerability under attack (CVE-2025-54236)

Report: AI in Identity Security Demands a New Playbook

Webinar: The BAS Summit 2025: Redefining Attack Simulation through AI

Download: Cyber defense guide for the financial sector

Webinar: Why AI and SaaS are now the same attack surface

Building trust in AI: How to keep humans in control of cybersecurity

Faster LLM tool routing comes with new security considerations

index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1

robots

ESET uncovers Lazarus Operation DreamJob, a North Korean campaign using fake job offers to spy on Europe’s defense and drone firms.

description

https://www.helpnetsecurity.com/2025/10/23/eset-lazarus-operation-dreamjob/

https://img.helpnetsecurity.com/wp-content/uploads/2025/10/06091056/danger-monitor-1500.webp

author

twitter:card

twitter:creator

twitter:site

twitter:label1

twitter:data1

twitter:label2

twitter:data2

generator

viewport

https://img.helpnetsecurity.com/wp-content/uploads/2019/09/09093400/cropped-hns2-270x270.png

msapplication-TileImage

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

CSL Computer Service Langenbach GmbH d/b/a joker.com

HELPNETSECURITY.COM

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon.com, Inc.

AWS RPKI Management POC

IP Routing

Amazon EC2 Network Operations

AMAZON-CF

{"@context":"https://schema.org","@graph":[{"@type":"WebPage","@id":"https://www.helpnetsecurity.com/2025/10/23/eset-lazarus-operation-dreamjob/","url":"https://www.helpnetsecurity.com/2025/10/23/eset


  var _paq = window._paq = window._paq || [];
  _paq.push(['disableCookies']);
  _paq.push(['trackPageView']);
  _paq.push(['enableLinkTracking']);
  _paq.push(['trackAllContentImpressions']);
  (fun


document.addEventListener("DOMContentLoaded", function () {
    document.querySelectorAll(".mailerlite-subscription-form").forEach((form) => {
        const submitButton = form.querySelector("button[


{"prefetch":[{"source":"document","where":{"and":[{"href_matches":"\/*"},{"not":{"href_matches":["\/wp-*.php","\/wp-admin\/*","\/wp-content\/uploads\/*","\/wp-content\/*","\/wp-content\/plugins\/*","


/* <![CDATA[ */
var hns23Ajax = {"ajax_url":"https:\/\/www.helpnetsecurity.com\/wp-admin\/axe-effect\/"};
var mailerlite_ajax_object = {"ajax_url":"https:\/\/www.helpnetsecurity.com\/wp-admin\/axe-ef


/* <![CDATA[ */
var hns23Params = {"wallpaperAdDelay":0,"modalAdDelay":0,"modalBackdropTransparency":92}
/* ]]> */



!function(){function e(){const e=(e,t)=>{const n={css:'link[rel="stylesheet"]',js:"script"};if(!n[t])throw new Error('Invalid type. Use "css" or "js".');const o=document.querySelectorAll(n[t]),a=e.in

X-UA-Compatible

WordPress

Script

Open-Graph-Protocol

MetaGenerator

MySQL

Debian

Matomo

⚠️ High Risk - https://www.helpnetsecurity.com/2025/10/23/eset-lazarus-operation-dreamjob/

Requests	IP Address	Location	AS Autonomous System
16	18.173.205.19	United States	AS16509AMAZON-02
0	34.210.145.51	Boardman, Oregon, United States	AS16509AMAZON-02
0	18.157.122.248	Frankfurt am Main, Hesse, Germany	AS16509AMAZON-02
0	216.58.206.35	United States	AS15169GOOGLE
0	52.222.214.68	United States	AS16509AMAZON-02
0	99.84.152.127	United States	AS16509AMAZON-02
0	142.250.186.42	United States	AS15169GOOGLE
0	52.222.214.58	United States	AS16509AMAZON-02
0	52.27.49.23	Boardman, Oregon, United States	AS16509AMAZON-02
0	3.126.133.169	Frankfurt am Main, Hesse, Germany	AS16509AMAZON-02
16	29	-	-

Security Scan Report: www.helpnetsecurity.com

Summary

AI Security Verdict

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History