Kimsuky impersonated a foreign news-agency researcher to approach North Korean human-rights activists with written interview requests about Korean Peninsula peace issues. The campaign used spear-phishing, malicious HWP documents, and MSC files disguised with DOC or PDF icons, then communicated with command-and-control infrastructure in Italy to enable internal information theft.