North Korean hacker group Kimsuky attacked 1,468 users in South Korea and successfully stole some crypto assets

The National Investigation Headquarters of the South Korean Police Agency revealed that the North Korean hacker group "Kimsuky" recently stole personal information such as email addresses, account numbers, and passwords of more than 1,000 South Korean users, and attempted to steal virtual assets. The total number of victims reached 1,468, including 1 former minister-level person, 57 former and current civil servants in the fields of diplomacy, unification, national defense, and national security, and 1,411 ordinary people. The Kimsuky organization switches IP addresses through 576 servers at home and abroad, and sends emails implanted with malicious code and fake websites pretending to be the official websites of government agencies. The organization also tried to log into the virtual asset exchange accounts of 19 victims, but failed due to strict security management. However, they took control of 147 servers through cyber attacks and stole virtual assets worth more than 1 million won (approximately US$760). South Korean police are working with the Foreign Ministry, the U.S. government and the United Nations to share information to prevent damage from such attacks. (China Daily)