UN Panel of Experts S/2024/215
threat_inteligence_report_k onniapt.pdf · September
Annex 59: List of DPRK Cyberthreat actors’ malicious activities monitored by the Panel in 2023 (row 37 of 75, PDF p. 325). DPRK cyber actor: ScarCruft; Report Name: threat_inteligence_report_k onniapt.pdf; Case Summary: In one campaign, ScarCruft sent spearphishing emails with an attached compressed file that hid a LNK file inside, targeting DPRK human rights groups and people active in the unification field in the Republic of Korea. In another campaign, ScarCruft hid a LNK file inside a compressed file, named ‘securitymail.zip’ and purporting to be a HTML web page file, which when opened prompted users to enter their passwords into a website purporting to be a bank secure login screen with the URL of “securitymail.html.”; Publication Month: September