UN Panel of Experts S/2023/656
TA444 credential-harvesting phishing (“SendGrid URL”) · late December 2022
Para 116: “A cybersecurity company reported in January that TA444, a Democratic People’s Republic of Korea-sponsored advanced persistent threat group that “overlaps with BlueNoroff”, sent phishing emails to a wide variety of targets in multiple Member States in late December 2022, spanning several “verticals” including education, government and health care, in addition to finance. The lure emails enticed users to click a “SendGrid URL”, which redirected victims to a credential-harvesting page.”