Hunt.io blog
“Million OK!!!!” and the Naver Facade: Tracking Recent Suspected Kimsuky Infrastructure · 2024-12-10T00:00:00.000Z
In March 2024, a security researcher on Twitter/X observed a series of IP addresses and domains delivering an unusual HTTP response: ' Million OK!!!! '. Subsequent analysis of the infrastructure and domains linked this activity to the North Korean threat group Kimsuky. ... North Korean threat actors, particularly Kimsuky, have repeatedly targeted South Korean platforms like Naver to steal credentials.