North Korean Hackers Target Defense Ministry Advisory Panel
This is a fairly simple malware attack launched by the North Koreans:
A hacker group believed to be linked to North Korea has attempted to steal data from South Korean experts working as members of an advisory panel for the defense ministry, a cybersecurity firm said Sunday.
Korea Times
Emails were sent to some members of the advisory panel earlier this month from hackers who disguised themselves as a North Korea-related department of the defense ministry, notifying them of an upcoming seminar on the occasion of the anniversary of a 2018 inter-Korean military agreement, according to ESTsecurity.
A few days later, another email was sent, asking the panel members to open attached papers written for the event. It had some disguised images on the attachments that appeared to be official government documents, according to ESTsecurity.
ESTsecurity said it suspects North Korea-linked hacking organization Thallium to be behind the attempted attacks.
The hackers attached malicious files disguised as government documents to emails that can install malware on users’ computers, allowing them to steal information.
You can read more at the link.
