February 21, 2024

North Korean group accused of phishing attack against Russian defense industry

A Russian researcher attributed more 2020 phishing attempts to a North Korea-linked group called Kimsuky

A Russian researcher is accusing a North Korea-linked hacking group called Kimsuky of attempting phishing attacks that targeted Russia’s aerospace and defense industry in 2020, according to Russian newspaper Kommersant.

Anastasia Tikhonova, a senior researcher at cybersecurity firm Group-IB, reportedly claimed that Kimsuky attacked Russian aerospace and defense targets in a way that’s similar to North Korean phishing attacks against other countries’ aerospace and defense industries. Tactics included classic email fake login-capture phishing and more sophisticated job-offer lures.