North Korean Kimsuky Hackers Use Russian Email Addresses for Credential Theft Attacks

"Phishing emails were sent mainly through email services in Japan and Korea until early September," Korean cybersecurity firm Genians said. "Then, from mid-September, some phishing emails disguised as if they were sent from Russia were observed."