joint_cybersecurity_advisory_2026-07-30.pdf (534 KB)

South Korean security authorities warn that state-sponsored hacking groups are targeting Korean individuals and companies through phishing emails disguised as resumes, recruitment proposals, donations, or investment materials. The attackers also compromise news, hospital, and poorly secured websites for watering-hole attacks that may exploit outdated electronic-signature, authentication, and keyboard-security software. Successful infections can expose browser credentials, documents, customer data, and trade secrets, spread to nearby systems, and support extortion. The advisory recommends rapid patching, multifactor authentication, network isolation, IOC-based monitoring, and stronger website and software supply-chain controls.