UN Panel of Experts S/2021/211
Phishing email to a Panel expert spoofed as a UN employee · October 2020
Para 128: “Cyberattacks against the Panel and Committee members continued. In October 2020, a Panel expert received a phishing email spoofed as being from a United Nations employee which contained a malicious link (see figure 27). In this regard, the expert independently identified the Internet protocol address through which the email was sent as having previously been used by Kimsuky (a.k.a. Thallium) and Konni, another cyberthreat group widely associated with the Democratic People’s Republic of Korea.” Footnote 112: “The Panel confirmed that one delegate of a member of the Security Council had also received the same phishing email that Panel experts received in 2020”.