2023.11.22
North Korean Hacking Group Hijacks South Korean Email Accounts, Expands Targets to Public and Offic
The North Korean hacking group Kimsuky compromised 500+ servers, accessing 1,000+ South Korean email accounts, including 1,468 belonging to officials and civilians in foreign affairs, defense, and security. Using 576 servers, they sent phishing emails disguised as government notices, installing malware through attachments, resulting in data leaks. Kimsuky also targeted 19 cryptocurrency exchange accounts, attempted theft, and conducted cryptocurrency mining on 147 servers, yielding less than 1 million won without server administrators' awareness.
Visit our official English blog to read more about "North Korean Hacking Group Hijacks South Korean Email Accounts, Expands Targets to Public and Officials"