
In a recent alarming development, North Korea-aligned Kimsuky hackers have adopted an evolving approach to their phishing attacks by utilizing Russian email services to steal credentials from unsuspecting victims. Initially known for using Japanese and Korean email platforms, Kimsuky began a shift in mid-September, leveraging Russian addresses, particularly through VK’s Mail.ru service, to enhance the credibility of their phishing campaigns.