AhnLab ASEC blog (asec.ahnlab.com)
Phishing Attacks Impersonating Famous Korean Banking Apps · 2022-12-14
excerpt: The ASEC analysis team recently identified that multiple malicious domains targeting normal websites of the financial sector had been created. From early November, we detected multiple distribution cases of phishing emails impersonating Naver Help. Through these, we had been monitoring the malicious URL that was included in these emails. The sender’s username was ‘Naver Center’ […] | attribution sentence: One thing to note here is that n-e.kr was used as the top-level domain as in the past, AhnLab had identified a domain with a similar format being used in the Kimsuky group’s C2. | target sentence: The ASEC analysis team recently identified that multiple malicious domains targeting normal websites of the financial sector had been created.