North Korean hackers may be behind a new phishing campaign in South Korea impersonating the U.S. military, according to cybersecurity researchers.

The campaign targets Korean speakers using fake recruitment notices issued by the U.S. Army’s Civilian Human Resources Agency (CHRA), U.S. cybersecurity company Securonix said in a report Friday.

After taking control, the hackers can acquire system details, including the device’s unique address on a network, the operating system version and the network’s IP address, according to the report.

The firm did not identify a motive, but