Suspected North Korean Spies Impersonating VOA, Other Reporters Online – By Steve Herman & Jeff Seldin (VOA News) / Mar 30 2023
WASHINGTON — Experts on nuclear security policy and weapons proliferation were contacted by suspected North Korean hackers posing as Voice of America journalists, according to a threat intelligence group, which says this is part of a recent pattern of impersonating reporters from major news organizations.
The online spies were attempting to gather intelligence about the stance of international officials toward the Pyongyang government of Kim Jong Un, according to a report issued by Mandiant, an American cybersecurity firm and subsidiary of Google.
It is the latest known attempt in recent months by the cyber-espionage group known as APT43, also referred to as “Kimsuky” or “Thallium,” posing as journalists and targeting government organizations in the United States and South Korea, as well as academics and think tank analysts.
At least seven journalists from five news organizations were impersonated by someone with APT43, Mandiant Senior Analyst Gary Freas told VOA on Wednesday.
