Hackers use fake media domains to trick North Korea researchers | NK News
June 14, 2024

Hackers use fake media domains to trick North Korea researchers

Attackers impersonate reporters at Voice Of America to lure DPRK experts with legal documents out of Pyongyang

In a fresh attempt to steal passwords from researchers working on North Korea, hackers have registered domains that resemble web addresses from legitimate media organizations in order to send highly targeted emails to selected victims. 

An email obtained and analyzed by NK News on Thursday was sent from VOAKoreas.com — a domain that was registered less than four months ago and is not affiliated with Voice Of America (VOA). The email had a subject line of “[VOA Media] Inquiry” and claimed to come from VOA anchor Eunjung Cho.

Become a member for less than $4 per week.

  • Unlimited access to all of NK News: reporting, investigations, analysis
  • The NK News Daily Update, an email newsletter to keep you in the loop
  • Searchable archive of all content, photo galleries, special columns
  • Contact NK News reporters with tips or requests for reporting
Get unlimited access to all NK News content, including original reporting, investigations, and analyses by our team of DPRK experts.
Subscribe now

All major cards accepted. No commitments – you can cancel any time.