Kimsuky Group’s Phishing Attacks Targetting North Korea-Related Personnel

AhnLab Security Emergency response Center (ASEC) has recently discovered that the Kimsuky group had created a webmail website that looks identical to certain national policy research institutes.

Earlier this year, ASEC had covered similar issues in the posts ‘Web Page Disguised as a Kakao[1]/Naver[2] Login Page’. The previous attacker set the fake login page with autocompleted IDs of trade, media, and North Korea-related individuals and organizations. In addition to that, the recently discovered web page used a …

ahnlab asec attacks center emergency fake kakao kimsuky korea login malware analysis national naver north north korea personnel phishing phishing attacks policy research response security web webmail website