May 2025 APT Group Trends (South Korea)
Contents
May 2025 APT Group Trends (South Korea)
Overview
AhnLab is monitoring Advanced Persistent Threat (APT) attacks in South Korea using its own infrastructure. This report covers the classification, statistics, and features of APT attacks in Korea that were identified over the course of a month in May 2025.
Figure 1. Statistics of APT attacks in South Korea in May 2025
The APT attacks that have been confirmed to have been distributed in Korea have been classified by infiltration type, and most of them were found to be spear phishing. In May 2025, the distribution method using spear phishing was the most prevalent.
Trends of APT Attacks in South Korea
The following are the cases and functions for each APT attack infiltration type in May 2025.
1) Spear Phishing
Spear phishing is a type of phishing attack against specific individuals or groups. Unlike ordinary phishing attacks, the threat actor conducts reconnaissance before launching the attacks to collect information on …
Overview
AhnLab is monitoring Advanced Persistent Threat (APT) attacks in South Korea using its own infrastructure. This report covers the classification, statistics, and features of APT attacks in Korea that were identified over the course of a month in May 2025.
Figure 1. Statistics of APT attacks in South Korea in May 2025
The APT attacks that have been confirmed to have been distributed in Korea have been classified by infiltration type, and most of them were found to be spear phishing. In May 2025, the distribution method using spear phishing was the most prevalent.
Trends of APT Attacks in South Korea
The following are the cases and functions for each APT attack infiltration type in May 2025.
1) Spear Phishing
Spear phishing is a type of phishing attack against specific individuals or groups. Unlike ordinary phishing attacks, the threat actor conducts reconnaissance before launching the attacks to collect information on …