Kimsuky Updates its Tactics to Target South Korean Experts

German and South Korean government agencies warned about a new spear-phishing campaign by the North Korean APT, Kimsuky. The campaign targets experts on issues related to the Korean peninsula. Attackers send a spear-phishing email to the targeted victims, asking them to install a malicious Chrome extension. The other tactic attempts to exploit Google Play's web-smartphone synchronization function to install malicious apps on the target’s device.