Kimsuky’s Social Engineering Campaign Targets Experts in North Korean Affairs

# Kimsuky Targets Experts with Social Engineering Campaign

## Overview

The notorious North Korean nation-state threat actor, Kimsuky, has been found to be running a social engineering campaign. The goal of the campaign is to steal Google credentials and deliver reconnaissance malware. This targeted attack is aimed at experts in North Korean affairs.

## Stealing Google Credentials and Delivering Malware

A cybersecurity firm, SentinelOne, has shared a report stating that Kimsuky’s objective includes stealing subscription credentials from NK News. This cyber-espionage group goes to great lengths in order to achieve their objectives.

## Targeted Attack on Experts in North Korean Affairs

Kimsuky’s social engineering campaign is aimed at experts in North Korean affairs. They use various tactics such as impersonating journalists with fake emails and building trust with their targets. Once trust is established, they send malicious attachments or links in order to deliver malware.

## Conclusion

Kimsuky is known for its sophisticated tactics and extensive use of social engineering to achieve their goals. They have been linked to numerous cyber-espionage campaigns in the past. The cybersecurity community must remain vigilant and work together to prevent attacks from threat actors like Kimsuky.

Original Article: https://thehackernews.com/2023/06/kimsuky-targets-think-tanks-and-news.html