보도자료230525.hwp (10 MB)

South Korea's National Intelligence Service warned that North Korean hacking groups were impersonating domestic portal sites such as Naver and Kakao/Daum in phishing emails. Based on 2020-2022 statistics, NIS said email-based attacks accounted for 74 percent of observed North Korean hacking methods against South Korean targets, ahead of vulnerability exploitation and watering-hole attacks. The advisory described victims losing years of mailbox contents, cloud-stored resumes, work files, and sensitive remote-work materials after opening messages that posed as portal administrators or password-leak alerts.