North Korean Hackers Masquerade as Russians in Global Credential Theft Campaign

North Korean hacking group Kimsuky has transitioned from using Japanese and Korean email services to Russian Mail.ru domains in their latest phishing campaign. The operation, launched in April 2024, employs sophisticated tactics including institutional impersonation, fake security alerts, ...