Proofpoint observed state-aligned APT activity targeting journalists and media organizations, including a North Korea-aligned TA404 campaign in early 2022 against a US-based media organization. The TA404 activity used job opportunity-themed phishing after the outlet published an article critical of Kim Jong Un, fitting the report’s broader pattern of media targeting for espionage and influence objectives. The excerpt does not provide payload, infrastructure, or IOC details for the TA404 case, so the supported finding is the actor alignment, target type, lure theme, and timing. In the wider report context, Proofpoint notes that media accounts are valuable because they can expose sources, sensitive reporting, and organizational access.