Operation “FreeMilk”

ThaiCERT Threat Group Cards

Operation “FreeMilk” Target: Several non-Korean financial institutions. Method: A malicious Microsoft Office document, a deviation from their normal use of Hancom documents. https://unit42.paloaltonetworks.com/unit42-freemilk-highly-targeted-spear-phishing-campaign/

The targeted victims in this campaign we identified include: a bank based in the Middle East trademark and intellectual property service companies based in Europe an international sporting organisation individuals with indirect ties to a country in North East Asia

targeted several non-Korean financial institutions