DPRK's Kimsuky APT Abuses Weak DMARC Policies, Feds Warn

North Korean APT Kimsuky is exploiting weak or nonexistent DMARC configurations to send convincing, targeted spear-phishing emails that impersonate trusted organizations and target journalists, think tanks, and government-affiliated individuals; the FBI and NSA recommend enforcing DMARC with p=reject or p=quarantine and maintaining SPF/DKIM hygiene to reduce spoofing risk.