SEOUL, Jan. 19 (UPI) -- North Korea-linked hackers are using emails that impersonate human rights organizations and financial institutions to lure targets into opening malicious files, according to a threat intelligence report released Monday by South Korean cybersecurity firm Genians.
The campaign, dubbed "Operation Poseidon," has been attributed to the Konni hacking cluster, a group linked by security researchers to Pyongyang-backed cyber operations and known for conducting long-running advanced persistent threat, or APT, campaigns.
"The threat actor was identified as repeatedly employing social engineering tactics by impersonating North Korean human rights organizations and financial institutions in South Korea," the Genians Security Center report said.
Genians said Konni has overlapping targets and infrastructure with other North Korea-linked threat groups, including Kimsuky and APT37, which have been tied to cyber espionage, surveillance and influence operations targeting South Korean government agencies, researchers and civil society groups.
Related
