North Korean cybercriminals are attempting to steal South Koreans’ personal information by spoofing a widely used e-commerce app, Seoul’s intelligence agency announced Thursday.

The National Intelligence Service (NIS) said in a press release that it recently uncovered “circumstantial evidence” that an unnamed North Korean cybercrime organization tried to “manipulate and distribute” an e-commerce app used by more than 20 million South Koreans.

The NIS did not name the original app or mention how many people have unwittingly downloaded the fake version, but warned that the copycat app is hard to identify as it appears to have the same icons and