Kimsuky__2023__JOINT_CSA_DPRK_SOCIAL_ENGINEERING.pdf

This joint advisory from U.S. and ROK government agencies describes Kimsuky (DPRK state-sponsored) social-engineering spearphishing campaigns that impersonate journalists, scholars, think-tank researchers, and officials to harvest credentials, deliver malware (including BabyShark), and maintain persistent access to targeted accounts and devices; it enumerates common lures, red flags, sample phishing messages, indicators, and recommended mitigations and reporting procedures.