UNC2970 Hackers Target Job Seekers with Weaponized PDF Readers

In June 2024, researchers identified a North Korea-linked cyber espionage group, UNC2970, targeting victims in the energy and aerospace industries who used job openings as a lure, sending malicious PDF files disguised as job descriptions.  The PDF files contained a trojanized version of SumatraPDF, which delivered the MISTPEN backdoor, as it has been observed that … Continue reading UNC2970 Hackers Target Job Seekers with Weaponized PDF Readers