Operation Daily Coffee was a high-volume spearphishing campaign attributed to North Korea’s RGB-D5 organization. Disclosed in April 2020, it reportedly targeted dozens to hundreds of prominent South Korean individuals each day. Documented cases represented only a fraction of the activity observed during a short period, indicating a sustained and coordinated phishing effort rather than isolated messages.