DPRK-attributed malware attack uses ROK government certificate to trick victims | NK News
NK News Logo
October 05, 2026Oct 05, 2026

Weapon Directory

News

DPRK-attributed malware attack uses ROK government certificate to trick victims

Code reportedly designed by North Korean “Kimsuky” group installs trojan to steal information from infected computers

North Korean hackers have used stolen residential details of a former South Korean government official to spread malware and gain access to their victims’ computers, security researchers in Seoul told NK News.

“We are 100% sure the ‘Kimsuky’ group was behind this attack,” Director at ESTsecurity Mun Chong Hyun said, referring to a group of hackers that has previously been linked to North Korea and had carried out similar attacks in November and January last year. 

The campaign used a file with the SCR extension disguised as a PDF to install a type of malware known as trojan, which