Targeting of retired South Korean diplomats, government and military officials

ThaiCERT Threat Group Cards

In what appears to be the first attack of its kind, a North Korean state-sponsored hacking group has been targeting retired South Korean diplomats, government, and military officials. Targets of this recent campaign include former ambassadors, military generals, and retired members of South Korea’s Foreign Ministry and Unification Ministry. https://www.zdnet.com/article/north-korean-state-hackers-target-retired-diplomats-and-military-officials/

Wikipedia (English), accessed 2026-10-06

In August 2019 it was reported that Kimsuky was targeting retired South Korean diplomats, government, and military officials, in an attack called "the first of its kind."

Hackmageddon cyber attacks timelines (Paolo Passeri)

A North Korean state-sponsored hacking group has been targeting retired South Korean diplomats, government, and military officials. The attacks occurred between mid-July and mid-August, and targeted Gmail and Naver email accounts.

In a first of its kind operations, state-sponsored group goes after retired South Korean officials.