ESRC reports a North Korea-linked spear-phishing operation targeting diplomacy, security, and unification specialists with academic-conference discussion and paper-request lures. The operators first sent benign-looking emails, then followed up only with responsive targets, delivering double-extension LNK files disguised as PDFs that invoked mshta.exe to contact attacker infrastructure.