North Korean Hackers Targeted Nearly 18,000 in Phishing Campaign During Martial Law Turmoil

Summary: North Korean hackers launched a phishing campaign targeting around 18,000 individuals, sending over 120,000 emails that impersonated South Korea’s Military Counterintelligence Command amidst Martial Law turmoil. The operation utilized automated methods and recycled infrastructure, successfully compromising at least 570 recipients’ sensitive information. The South Korean authorities have issued warnings to the public to remain vigilant against such phishing threats.

Affected: South Korean Professionals in Defense, National Security, and Foreign Affairs

Keypoints :

• North Korean hackers executed a three-month phishing campaign from November 2024 to January 2025.
• Emails mimicked official communications, including fake military documents and celebrity concert invitations.
• Authorities confirmed North Korea’s involvement through forensic analysis and warned the public against phishing threats.