Public statements or reports from cybersecurity firms or government agencies

U.S. Warns of Kimsuky Hackers Spoofing Emails to Target Journalists, Institutions

May 3, 2024, 10:45 AM

The U.S. government has issued a warning about North Korean hackers, identified as the Kimsuky group, utilizing spoofed emails from trusted sources to target various entities including academic institutions, think tanks, journalists, and nonprofit organizations. These hackers exploit poorly configured email servers and use tactics such as the 'Reply-to' exploit to bypass security measures. The NSA and FBI have highlighted the urgency of setting up defenses against these cyber threats, particularly by blocking spoofed emails from journalists intended to spy on policy experts.