December 2025 APT Attack Trend Report (South Korea)
Contents
December 2025 APT Attack Trend Report (South Korea)
Overview
AhnLab monitoring APT (Advanced Persistent Threat) attacks in South Korea using its own infrastructure. This report covers the classification and statistics of APT attacks in South Korea that were identified over the course of one month in December 2025. It also provides an overview of the features of each attack type.
Figure 1. Statistics of APT attacks in South Korea in December 2025
In Korea, most of the identified APT attacks were distributed using the spear phishing method. Notably, attacks using LNK files accounted for the highest proportion in December 2025.
APT Group Targets South Korea
The following are the cases and features of APT attacks in Korea identified in December 2025.
1) Spear Phishing
Spear phishing is a type of phishing attack targeting specific individuals or groups. Unlike general phishing, attackers gather and analyze information about the target through a reconnaissance phase before executing the attack. Attackers use …
Overview
AhnLab monitoring APT (Advanced Persistent Threat) attacks in South Korea using its own infrastructure. This report covers the classification and statistics of APT attacks in South Korea that were identified over the course of one month in December 2025. It also provides an overview of the features of each attack type.
Figure 1. Statistics of APT attacks in South Korea in December 2025
In Korea, most of the identified APT attacks were distributed using the spear phishing method. Notably, attacks using LNK files accounted for the highest proportion in December 2025.
APT Group Targets South Korea
The following are the cases and features of APT attacks in Korea identified in December 2025.
1) Spear Phishing
Spear phishing is a type of phishing attack targeting specific individuals or groups. Unlike general phishing, attackers gather and analyze information about the target through a reconnaissance phase before executing the attack. Attackers use …