Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstalliTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
South Korean prosecutors said attackers presumed to be North Korean hackers used targeted phishing attempts against email accounts belonging to about 90 diplomats, security officials, journalists and North Korea specialists from January through June 2016. Prosecutors reported that passwords for 56 accounts were compromised and investigators found 27 phishing sites. Whether any state secrets were stolen was still under investigation when the reports were published.
What South Korean prosecutors said happened
Yonhap reported on August 1, 2016, that South Korean prosecutors attributed the campaign to hackers presumed to be from North Korea. The reported targets were roughly 90 people: South Korean diplomats, security officials, journalists assigned to relevant ministries, and researchers who specialized in North Korea issues. The activity took place between January and June 2016. Yonhap’s report
The reported figures were 56 compromised email-account passwords and 27 phishing sites identified by investigators. These are counts reported by Yonhap from prosecutors’ statements, not independently verified measurements. The report described attempts to access individual email accounts; it did not report a confirmed intrusion into government mail servers.
Recommended Free Tools
How the phishing scheme worked
Prosecutors described a spear-phishing operation: attackers sent targeted messages intended to persuade particular recipients to enter their credentials on phishing sites. Investigators said the methods resembled those associated with a high-profile North Korean cyberattack in 2014. The 2016 report did not identify a hacking group.
#1 Best Overall
- POWERFUL SECURITY KEY: The YubiKey 5 is a versatile physical passkey that protects your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 secures 100+ of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 via USB and tap it to authenticate. No batteries, no internet connection, and no extra fees required.
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Prosecutors said the phishing sites had been shut down in cooperation with South Korea’s National Security Service and the Korea Internet and Security Agency.
Were state secrets stolen?
That remained unresolved at the time. The compromised passwords were reported as a concrete finding, but prosecutors were still assessing whether state secrets had leaked. The Associated Press report carried by CBS said officials were investigating whether confidential government information had been stolen and that no sensitive-information leakage had been reported at that point. The AP report carried by CBS
Rank #2
- Programmer Gift - Cybersecurity The Few The Proud, The Paranoid. Get this to have the best information security workers present. Computer programmer, computer coder, and anyone in IT tech!
- Material: Stainless Steel, it is lead free and nickel free, hypo allergenic, it doesn’t rust, change colour or tarnish.
- Measurement: 30mm(1.18"). TIPS:manual measuring permissible error.
- If you are a cybersecurity engineer and you love to work with computer science this will be a great gift for you to wear. People who like programming, hackers and hacking will like this fantastic IT security keychain.
- Velvet bag- Only the most elegant velvet jewelry pouches are used to package and ship our bangle. If you have any quality problems, please feel free to contact us and we will give you a proper solution until you satisfied.
What the report did—and did not—establish
- Attribution: South Korean prosecutors said the attackers were presumed to be North Korean hackers. The reporting does not establish North Korea’s responsibility independently.
- Target: Selected individuals’ email accounts were targeted; a government mail-server breach was not reported.
- Impact: Prosecutors reported that passwords for 56 accounts were compromised. The extent of any resulting access to or theft of information was not established in the reports.
- Actor identity: The 2016 report did not name a group. Kimsuky should not be retroactively identified as the actor in this incident.
Later phishing reports describe separate incidents
Subsequent reporting provides context, but it does not resolve who carried out the 2016 campaign or what information was taken.
| Incident | Targets and account type | Reported method and impact | Attribution status |
|---|---|---|---|
| January–June 2016 | About 90 South Korean diplomats, security officials, relevant-ministry journalists and North Korea specialists; individual email accounts | Targeted phishing; prosecutors reported 56 compromised passwords and 27 phishing sites | Prosecutors said hackers were presumed North Korean; the 2016 report named no group |
| June 2023 | Nine people reportedly accessed phishing sites; the report does not establish that this was the same victim group as in 2016 | Yonhap reported that account information was stolen and victims’ email activity and attachments were monitored or taken | South Korea’s National Police Agency attributed this separate campaign to Kimsuky. Yonhap’s 2023 report |
| May 2024 | Defense officials’ personal email accounts, separate from work email connected to military servers | A joint military-police investigation was opened into the separate incident | Suspected North Korean involvement was still being investigated. Yonhap’s 2024 report |
The 2023 and 2024 reports concern distinct incidents, not later stages of a single investigation into the 2016 campaign. The 2024 distinction between personal accounts and military-server work email is especially important: a personal-account incident is not, by itself, evidence of a breach of a government network.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Advice attributed to an unnamed prosecution official
Yonhap quoted an unnamed prosecution official urging government officials not to use private email accounts for official work and to change passwords frequently. The official also said that, for important tasks, officials should consider security steps such as temporarily disconnecting from the internet. The statement was general advice, not evidence that a specific security measure would have prevented this incident.
Quick Recap
Rank #4
- KEYCHAIN WITH CHARM: Our circle keychains have just the right balance of fun and function, and hold your key collection together with style. Made from aluminum.
- PROFESSIONALLY PRINTED: Thousands of vivid prints to choose from
- IDENTIFY YOUR KEYS: Easily find your lost keys with our unique novelty prints
- GIFTABLE: A perfect addition to any gift set
- IDEAL FOR YOURSELF & A UNIQUE GIFT: Surprise your husband, brother, dad, grandpa, son, uncle or friend, or order one just for you! Our men's pajamas make a unique and thoughtful gift for Christmas, Father's Day, Mother's Day and birthdays, or just because!
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
