North Korean cybercriminals are attempting to steal South Koreans’ personal information by spoofing a widely used e-commerce app, Seoul’s intelligence agency announced Thursday.

The National Intelligence Service (NIS) said in a press release that it recently uncovered “circumstantial evidence” that an unnamed North Korean cybercrime organization tried to “manipulate and distribute” an e-commerce app used by more than 20 million South Koreans.