← All actor clusters
kgf2016@yonsei.ac.kr
kgf2016@yonsei.ac.kr is an email address
that one published source reports
in connection with APT37 activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Cisco Talos.
The report is dated 2018-01-16.
email address
APT37
MATCHED IN SOURCE
First seen 2018-01-16
· last seen 2018-01-16
Source
-
…The sender was 'kgf2016@yonsei.ac.kr' which is the contact email of the Korea Global Forum, a separate conference. When we analyzed the email headers, we determined that the…
Korea In The Crosshairs
— Cisco Talos
· under “August 2016 to March 2017: "Golden Time" Campaign As with the majority of Group 123 campaigns, the initial attack vector during this campaign was spear phishing. Talos identified two different kinds of emails. The first email we discovered was the most interesting. In this sample, we observed the attackers praising the user for joining a panel related to the "Korean Reunification and North Korean Conference". The text in the email explained that the recipient should complete the attached document to provide necessary feedback. This appears to be a non-existent conference. The closest match we identified related to any Unification conference was held in January 2017, which was the NYDA Reunification conference. The sender was 'kgf2016@yonsei.ac.kr' which is the contact email of the Korea Global Forum, a separate conference.”
· published 2018-01-16
· pulled 2026-09-12
Find this indicator in the index,
or see every email address this site holds under
Email addresses in the browse listing.
Disclaimer
An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently.
What inclusion means.
See the
sourcing methodology.
