Be respectful in your interactions with fellow members. You can Go Here to read our Terms and Rules. Visit My Profile to create your avatar and see your posts. If you to report a bug or issue, email us at support.GI US.com

Title: October 25, 2025

GRAY ZONE BRIEF 25 OCTOBER 2025

NORTH KOREA

North Korean hacking group targeting European drone maker with ScoringMathTea malware. North Korea’s prolific Lazarus Group hacked three Europe-based defense companies last spring to steal data on drone components and software, according to cybersecurity firm ESET. The victims included a metal engineering firm, an aircraft component maker, and a defense company. One of the firms supplied drone equipment used in Ukraine, which North Korean troops may have encountered. ESET said the attacks were part of Lazarus’s Operation DreamJob, which uses fake job offers to deliver malware and gain access to networks. The group deployed its ScoringMathTea remote access trojan, previously used in similar operations worldwide. ESET found evidence that the hackers sought information to support North Korea’s drone development program and warned that more drone-sector firms could be targeted.

KAZAKHSTAN GROUP HACKING RUSSIAN AGENCIES

Hackers posing as Kyrgyz officials target Russian agencies in cyber espionage campaign.

A hacker group known as Cavalry Werewolf — also tracked as YoroTrooper and Silent Lynx — has been conducting a months-long espionage campaign against Russian government agencies and industrial firms, cybersecurity firm Picus Security reported. From May to August 2025, the group used phishing emails spoofing Kyrgyz government ministries to infect targets in Russia’s public, energy, mining, and manufacturing sectors with custom malware called FoalShell and StallionRAT. The tools allowed remote access and data theft via Telegram-based control channels. Picus said evidence suggests expanding operations toward Tajikistan and the Middle East. Cisco Talos has previously linked the group to Kazakhstan, citing linguistic and regional indicators.

SINGAPORE

Singapore urges cooperation against cyber threats to protect developing nations.

Singapore’s Foreign Minister Vivian Balakrishnan called for stronger global cooperation to help developing nations defend against cyber threats, warning that “cybersecurity is only as strong as its weakest link.” Speaking at Singapore International Cyber Week, he urged governments and tech firms to include less-resourced states in digital governance efforts. Officials from Estonia and the Czech Republic echoed his call, citing a surge in state-sponsored attacks and the need for accountability in cyberspace. Panelists also highlighted growing risks from artificial intelligence and the difficulty of enforcing UN cyber norms.

GHANA

Ghana police rescue 57 Nigerians in crackdown on human trafficking and cybercrime.

Ghanaian police rescued 57 Nigerians forced into online romance scams during a raid in Accra, arresting five suspects accused of running a cybercrime and human trafficking ring. Authorities said the victims, aged 18 to 26, were lured with false job offers and coerced into internet fraud schemes. Police seized laptops, phones, vehicles, and other digital devices. The victims are receiving care and support before repatriation. Ghana’s government reports rising cross-border trafficking linked to online scams, with 54 convictions since 2023. Interpol recently arrested 260 suspects in similar African cybercrime operations.

NIGERIA

Nigerian army kills over 50 Boko Haram militants as it fights off drone attacks.

Nigeria’s army repelled simultaneous Boko Haram drone-enabled assaults on bases in Borno and Yobe, killing more than 50 militants and pursuing over 70 wounded. Spokesperson Sani Uba said the attacks launched from northern Cameroon and Yobe’s Katarko; ground troops and air strikes defeated the raiders. The clash follows last month’s Boko Haram massacre of at least 60 in Darul Jamal and underscores the insurgency’s evolution since Abubakar Shekau’s 2021 death and the rise of Islamic State–backed ISWAP. Washington recently cleared a potential $346 million arms sale to Nigeria.

SOUTH KOREA

What is South Korea’s ‘monster missile’, and what does it mean for relations with the North? South Korea plans to deploy its powerful Hyunmoo-5 “monster missile” by year’s end, a 36-ton ballistic weapon reportedly capable of carrying an eight-ton “bunker buster” warhead designed to strike deeply buried North Korean targets. Defense Minister Ahn Gyu-back said the missile aims to achieve a “balance of terror” with Pyongyang. Developed after U.S. limits on missile payloads were lifted in 2017, the system marks a major step in Seoul’s conventional deterrence strategy. Analysts say the move could bolster South Korea’s self-reliant defense posture but risk further escalating tensions with the North.

COMMUNIST CHINA

Xi Jinping’s Purges Shrink Ranks of China’s Communist Elite—and Boost His Power.

China’s Communist Party held one of its smallest top-level meetings in decades this week, reflecting President Xi Jinping’s sweeping purges of senior officials. Nearly one-sixth of the 376 Central Committee members were absent from the four-day plenum in Beijing, many removed in Xi’s ongoing disciplinary crackdown. Attendance fell to about 84%, the lowest since the late 1970s. To fill vacancies, 11 alternates were promoted to full membership—the largest midterm turnover since 2017. The purges have hit senior bureaucrats and military leaders, including two vice chairmen of the Central Military Commission. Analysts say the moves underscore Xi’s dominance and his drive to tighten political control despite reputational costs.

U.S. & CHINA

China’s New Strategy for Trump: Punch Hard, Concede Little.

Xi Jinping has developed a new strategy to deal with President Trump’s second term, moving away from China’s traditional diplomacy toward a hard-nosed, transactional approach tailored to Trump’s personality. According to sources close to Chinese policymakers, Xi seeks to exploit Trump’s dealmaking instincts by offering selective concessions—such as flexibility on TikTok—while responding forcefully to U.S. pressure, exemplified by sweeping export restrictions on rare-earth materials. Xi aims to project strength and unpredictability, believing Trump respects both. Yet his aggressive tactics risk alienating U.S. allies and accelerating Western efforts to reduce dependence on China. The two leaders will meet next week in South Korea.

Pray.

Train.

Stay informed.

Build resilient communities.

—END REPORT