Hunt.io blog
Open Directory Exposes Phishing Campaign Targeting Google & Naver Credentials · 2024-03-05T00:00:00.000Z
Over the past month, Hunt has tracked an ongoing phishing campaign by a likely North Korean threat actor focused on stealing Google and Naver credentials. ... The network infrastructure and specific top-level domains (TLDs) used in this campaign contain multiple overlaps with the North Korean-linked APT group Kimsuky (APT43, Black Banshee, Thallium).