Hackers used an NK News story to lure victims into opening a malicious Microsoft Word document that aims to grant attackers remote access to the computer, researchers warned on Thursday. Cybersecurity firm ESTsecurity attributed the malware campaign to Konni, a hacking group believed to operate on behalf of the DPRK that is also known as Kimsuki and Thallium.

ESTsecurity director Mun Chong Hyun told NK News the malicious attachment with the filename “Pyongyang stores low on foreign goods amid North Korean COVID-19 paranoia.doc” had initially been uploaded from an Internet connection in Finland in November 2020. Cybercriminals