Phishing Emails Impersonating the National Tax Service (NTS)
ID: 7e875442-e3f6-523d-a8b7-16fab7750441
STIX ID: report--7e875442-e3f6-523d-a8b7-16fab7750441
Feed Name: ASEC
Threat Score
AhnLab ASEC reports an ongoing phishing campaign impersonating Korea's National Tax Service distributing HTML attachments named "NTS_eTaxInvoice.html"; the pages solicit email credentials and exfiltrate them via embedded Telegram bot tokens and chat IDs, and related samples (MD5 hashes provided) indicate distribution of multiple malware types including EXE, document, and LNK variants.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.