UN Panel of Experts S/2023/656
Fake webmail website of a DPRK-related research institute used for credential phishing
Para 108: “In another case, Kimsuky created a Webmail website (see figure XXVI) that appears identical to that of a Democratic People’s Republic of Korea-related research institute, and used spear-phishing messages to lure victims to log in, thus providing Kimsuky with login information.”