On Thursday, the U.S. government released a fresh cybersecurity advise alerting readers to North Korean threat actors’ attempts to send emails that appear to be from reliable and authentic sources.
The Department of State, the Federal Bureau of Investigation (FBI), and the National Security Agency (NSA) jointly released the bulletin.
By obtaining unauthorized access to targets’ private documents, research, and communications, the DPRK [Democratic People’s Republic of Korea] uses these spear-phishing campaigns to gather intelligence on geopolitical events, adversary foreign policy strategies, and any information affecting DPRK interests, according to the NSA.
In particular, the method involves hiding social engineering attempts by taking use of DNS Domain-based Message Authentication, Reporting, and Conformance (DMARC) record settings that are incorrectly setup read more NSA and FBI Alert on North Korean Hackers Spoofing Emails from Trusted Sources.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.