NSA, FBI Alert on N. Korean Hackers Spoofing Emails from Trusted Sources

The U.S. NSA, FBI, and State Department published a joint advisory warning that North Korean APT Kimsuky (aka TA427) has been exploiting weak or misconfigured DMARC policies since December 2023 to send spoofed emails impersonating trusted parties and conduct long-running social-engineering campaigns against foreign-policy experts; organizations are advised to enforce DMARC (quarantine or reject) and configure aggregate reporting to mitigate delivery of spoofed messages.