North Korean cybercriminals are exploiting a vulnerability in a popular security software to attack South Korean institutions, Seoul’s spy agency has warned.

A threat group operating under the DPRK’s Reconnaissance General Bureau has targeted public institutions, the defense and IT industries and media outlets through the weakness in South Korean firm Dream Security’s MagicLine4NX software, the National Intelligence Service (NIS) said in a press release on Tuesday. 

MagicLine4NX is one of several security certificate tools utilized by South Korean financial institutions and other services to verify users’ identities and digitally