NSA and FBI Alert on North Korean Hackers Spoofing Emails from Trusted Sources
On Thursday, the U.S. government released a fresh cybersecurity advise alerting readers to North Korean threat actors' attempts to send emails that appear to be from reliable and authentic sources.
The Department of State, the Federal Bureau of Investigation (FBI), and the National Security Agency (NSA) jointly released the bulletin.
By obtaining unauthorized access to targets' private documents, research, and communications, the DPRK [Democratic People's Republic of Korea] uses these spear-phishing campaigns to gather intelligence on geopolitical events, adversary foreign policy strategies, and any information affecting DPRK interests, according to the NSA.
In particular, the method involves hiding social engineering attempts by taking use of DNS Domain-based Message Authenticat...