North Korea Uses GitHub in Diplomat Cyber Attacks as IT Worker Scheme Hits 320+ Firms

North Korean threat actors executed a cyber espionage campaign targeting diplomatic missions in South Korea from March to July 2025, employing at least 19 spear-phishing emails. These emails impersonated trusted contacts to deceive embassy staff and foreign ministry personnel into accepting fraudulent meeting invitations.

Want More Context? 🔎