DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Suspected DPRK Phishing Campaign Targets Naver; Separate Apple Domain Spoofing Cluster Identified

Date (as written)
2024-10-29T00:00:00.000Z
Year
2024
Country
South Korea
Actors (as written)
suspected North Korean-linked; Kimsuky-like
Actor pages
suspected North Korean-linkedKimsuky-like
Tags (as written)
Naver users; Apple (impersonated)

Source entries (1)

Hunt.io blog

Suspected DPRK Phishing Campaign Targets Naver; Separate Apple Domain Spoofing Cluster Identified · 2024-10-29T00:00:00.000Z
Hunt researchers recently uncovered evidence of a suspected North Korean-linked phishing campaign targeting Naver, a major South Korean tech platform. The initial discovery involved an open directory containing phishing pages crafted to steal Naver users' login credentials. ... Separately, an unrelated infrastructure cluster was found using domains and certificates that impersonated Apple. Both findings align with tactics commonly linked to cyber operations by Democratic People's Republic of Korea (DPRK) actors.
https://hunt.io/blog/dprk-phishing-targets-naver-apple-domain-spoofing

Suggest a correction on GitHub