Joint_CSA_NK_Using_Social_Engineering_20230531.pdf

This joint FBI/DoS/NSA and ROK intelligence advisory describes sustained Kimsuky (North Korean RGB-affiliated) social-engineering campaigns that impersonate journalists, academics, think-tank researchers, and officials to spearphish targets worldwide, harvest credentials, deploy malware (notably BabyShark), and maintain persistent access to policy and diplomatic communications; the report includes sample lures, red-flag indicators, IOC examples, and comprehensive mitigation and reporting recommendations.