Hackers Target North Korean Defectors
January 02, 2019 / Phil Muncaster
Personally identifiable information (PII) on nearly 1000 defectors from North Korea has been stolen in a cyber-raid, the South Korean government revealed late last week. It’s believed that one of the 25 “Hana” support centers for defectors in the country was targeted by a classic phishing attack. “Recognizing a possibility of one personal computer at the Hana Center in North Gyeongsang Province having been hacked, we carried out an on-site probe on December 19 in cooperation with the provincial government and the center and confirmed the computer was infected with a malicious code,” the Ministry of Unification said. “In that computer, there was a file containing personal information of North Korean defectors. The file was confirmed to have been leaked.” The phishing campaign involved the hijacking of an internal email account to make the phishing message appear more legitimate, according to reports.