| 2022년 상반기 | North Korea-linked phishing of foreign-policy, security and defense experts (Feb 2022: fake military research and peace association) | | |
| 2022년 상반기 | Phishing emails impersonating the Ministry of Unification (May 2022); KTV broadcast-invitation lure | | |
| 2022년 상반기 | ESRC column: recent Kimsuky payload changes (Daum mail used for command and control) | | |
| 2022년 상반기 | ESRC column: Kimsuky (Thallium) phishing domains impersonating portal sites | | |