#FakeNews

Incident/Operation

2019-04-22 • 금성121 조직', 통일부를 사칭한 APT 공격, 구글 드라이브로 악성코드 전파

Operation FakeNews was an ESRC-named spear-phishing campaign that impersonated South Korea’s Ministry of Unification. The activity used malicious HTML attachments, Google Drive-hosted encrypted shellcode, PowerShell-based in-memory loading, and pCloud for victim-data transmission.

Tagged Reports

« Back