South Korean authorities and four private cybersecurity firms warned on Thursday that North Korean state-sponsored cybercriminals continue to target individuals and businesses through phishing emails and sophisticated “watering hole” attacks that can infect computers simply by visiting hijacked websites. 

The joint advisory was issued by the Korean National Police Agency, National Intelligence Service, Korea Internet and Security Agency, Financial Security Institute and a public-private consultative body composed of AhnLab, S2W, ENKI WhiteHat and Plainbit. 

While the advisory referred broadly to “state-backed hacking groups” without naming countries, an accompanying report released by AhnLab highlighted one