Cybersecurity incident — 2023-08-07 00:00:00
Affected organization: NPO Mashinostroyeniya
Affected country: Russian Federation
Industry: Other Services (except Public Administration)
Event type: Exploitive
Event subtype: Exploitation of Application Server
Motive: Political-Espionage
Actor: NGB 3rd Technical Surveillance Bureau
Actor type: Nation-State
Actor country: Korea (the Democratic People's Republic of)

Researchers from Sentinel One reveal that the North Korean threat group ScarCruft hacked the IT infrastructure and email server for NPO Mashinostroyeniya, a Russian space rocket designer and intercontinental ballistic missile engineering organization using a Windows backdoor named 'OpenCarrot'.