ESET researchers have unveiled a new wave of cyberattacks by North Korea’s Lazarus Group, specifically targeting European defense firms involved in unmanned aerial vehicle (UAV) development. The ongoing Operation DreamJob, active since March 2025, aims to steal proprietary UAV data linked to the conflict in Ukraine, with attackers utilizing social engineering tactics and advanced malware like ScoringMathTea. This campaign underscores the vulnerabilities within the defense sector, as North Korea seeks to enhance its domestic drone capabilities by gathering intelligence on Western UAV technology. The implications of these attacks highlight the urgent need for robust cybersecurity measures in defense industries, given the geopolitical tensions surrounding UAV utilization in warfare.