Skip to content
Ferroscope
Menu
highState actoractive23 Oct 2026

North Korean campaign

State hackers launch a new attack campaign on South Korea

What happened

A state-linked group is running a fresh campaign against South Korean targets, combining spear-phishing with supply-chain intrusion into software vendors.

Timeline

  1. 23 Oct 2026 · 02:00 UTC

    Campaign detected

    Targets in government and software supply chains are identified.
  2. 23 Oct 2026 · 07:00 UTC

    TTPs published

    Analysts release indicators and phishing lure patterns.
  3. 23 Oct 2026 · 12:00 UTC

    Advisory

    Organisations are urged to review vendor access.

Sources