North Korean hacking group distributes malware impersonating 'security conference'
It has recently been revealed that a North Korean hacking group attempted to distribute malicious files through emails disguised as a national security-related academic conference. Image unrelated to the article. [Photo=Yonhap/OGQ]
According to cybersecurity company Genie Networks on the 12th, the North Korean hacking group APT37 sent malicious emails to domestic North Korea activists in March.
Genie Networks Security Center named the attack 'Operation Name: Toy Box Story' and analyzed it, revealing that the emails were intended to deceive recipients by disguising them as events related to a national security strategy think tank and letters to North Korean troops dispatched to Russia.
In addition, the email disguised as a think tank event contained a file named 'Related Poster. Zip'. Genie Networks explained that when a link (LNK) that allows users to move to a specific site in the file was executed, the malicious code hidden inside was executed.
Recently, it was revealed that a North Korean hacking group attempted to distribute malicious files through emails disguised as national security-related academic conferences. The photo is the email in question. [Photo = Genie Networks Blog]
In addition, it was revealed that an email disguised as a letter to the North Korean military contained a link in a 'zip' file that induces malicious code functions. Genie Networks advised not to click or download emails from unspecified senders.
The security industry also cautioned that cybersecurity threats intertwined with social issues such as elections and hacking of telecommunication companies may increase along with this case.
https://www.inews24.com/view/blogger/1843360
댓글
댓글 쓰기