A Reuters report, citing South Korea’s law enforcement, claims three major threat actors - Lazarus, Kimsuky, and Andariel, have been going after defense organizations and third-party contractors, planting malicious code in data systems, pulling out passwords and technical information.

Major North Korean hacking groups have mounted "all-out" cyber attacks against South Korean defence companies for more than a year, breaching the firms' internal networks and stealing technical data,

North Korean hackers with alleged state ties have made off with technical information from South Korean defense contractors.