Menu Content
Go Top

Domestic

Malignant Code Allegedly Linked to N. Korea Circulating as Tax Notice

Written: 2025-12-02 17:40:06Updated: 2025-12-02 18:03:05

Malignant Code Allegedly Linked to N. Korea Circulating as Tax Notice

Photo : YONHAP News

Malware with suspected ties to the North Korean government is reportedly circulating in the guise of a tax notice. 

KimJongRAT, a remote access Trojan linked to the hacking group Kimsuky, under the North's Reconnaissance General Bureau, is reportedly being circulated in disguise as an electronic tax bill.

Seoul-based software company ESTsecurity recently reported that the Trojan was being disseminated as an HTA file, according to industry sources on Tuesday.

The file in question is being spread as "national tax bill pdf.zip," and is believed to have initially circulated as a phishing email.

Downloading and executing the HTA file would result in the downloading of a decoy file and a malicious file.

The security response center urged the public to update their operating systems and software to the latest version for security purposes.

Editor's Pick

Close

This website uses cookies and other technology to enhance quality of service. Continuous usage of the website will be considered as giving consent to the application of such technology and the policy of KBS. For further details >