### Overview
Following the detection of initial access through spear phishing, this report delves into the tactics employed by the Lazarus Group to compromise targets within the aerospace sector.

### Key Findings
- **Target Identification:** The Lazarus Group meticulously selected high-value targets within aerospace companies, focusing on those with access to sensitive information.
- **Phishing Content:** Emails often mimicked legitimate aerospace industry communications, utilizing industry-specific jargon and references to ongoing projects.
- **Attachments:** Malicious attachments, often disguised as PDF files related to aerospace contracts or technical documents, were the primary vehicle for malware delivery.

### Implications
The use of highly targeted spear phishing attacks underscores the need for robust email filtering and user training to recognize and report suspicious communications.

### Next Steps
Prepare for the potential execution of custom Mac malware, which is likely embedded within the malicious attachments.