A threat linked to North Korea has been connected to an identity theft campaign, targeting educational and governmental institutions, including malware distributions to collect information.
This set of infiltrations has occurred between January and June 2021, point out the researchers from the company Proofpoint. These attacks have been directed at institutions located in the United States, Russia, China, and neighboring South Korea.
Researchers have also explained how these attacks are carried out. The malicious files are hidden in Microsoft Office files sent by email. From there, it is possible to infect the victim's devices and spread the malware.
So far, the extent of the damage caused is unknown. What is known so far is a bitcoin wallet address to which the ransom payments were made.
Of course, the recommendation is to fully distrust any received files, even those from known people.
Fountain: The Hacker News
Image: Pixabay