Hackers use fake media domains to trick North Korea researchers

News

Hackers use fake media domains to trick North Korea researchers

Attackers impersonate reporters at Voice Of America to lure DPRK experts with legal documents out of Pyongyang

Nils Weisensee December 17, 2020

Hackers use fake media domains to trick North Korea researchers

NK News | North Koreans using a computer in Pyongyang

In a fresh attempt to steal passwords from researchers working on North Korea, hackers have registered domains that resemble web addresses from legitimate media organizations in order to send highly targeted emails to selected victims.

An email obtained and analyzed by NK News on Thursday was sent from VOAKoreas.com — a domain that was registered less than four months ago and is not affiliated with Voice Of America (VOA). The email had a subject line of “[VOA Media] Inquiry” and claimed to come from VOA anchor Eunjung Cho.

About the Author

Nils Weisensee

Nils Weisensee is Director of News Operations at Korea Risk Group and covers cybersecurity for NK Pro. He previously founded information security firm Frontier Intelligence, served as head of operations at non-profit Choson Exchange, and was a reporter for DAPD and the Associated Press.

View more articles by Nils Weisensee EMAIL Twitter Linkedin Got a news tip?Let us know!