North Korean APT Bypasses DMARC Email Policies in Cyber-Espionage Attacks

Kimsuky, a North Korean APT tied to the Reconnaissance General Bureau, is conducting spear-phishing campaigns that exploit missing or misconfigured DMARC policies to spoof legitimate domains and impersonate trusted organizations (think tanks, media, academia, and government) to gather geopolitical intelligence; US agencies have issued advisories and the report emphasizes that proper DMARC configuration and stronger email hygiene are key mitigations.