UN Panel of Experts S/2021/777
Spear-phishing campaigns against the cryptocurrency industry
Para 171: “According to information provided by Member States, as well as open-source information, the Panel assesses that the Democratic People’s Republic of Korea continues to conduct spear-phishing campaigns against the cryptocurrency industry. These phishing campaigns make heavy use of social media platforms to identify potential targets as well as make initial contact. One Member State relayed to the Panel that the cyberactors typically use targeting methods including the use of email mass marketing platforms to send and track phishing messages; the use of relevant links to news articles or attachments (non-malicious) to initiate contact; sharing malicious files via popular cloud-based file-sharing platforms; and cold-calling support personnel at cryptocurrency exchange houses.”