The report describes a Kimsuky phishing site at hogmasil.lol that impersonated Google and Kakao login flows to harvest credentials. The source ties the activity to the North Korean Kimsuky threat cluster, notes possible phishing-mail delivery components, and records artifacts such as gattach.html and fake service-error prompts that asked users to re-enter login details.