Dark Reading - North Korean Hacking Group Targets Diplomats, Forgoes Malware

The TA406 group uses credential harvesting to target diplomats and policy experts in the United States, Russia, China, and South Korea, rarely resorting to malware.

from Dark Reading https://www.darkreading.com/threat-intelligence/north-korean-groups-focus-on-financial-gain-persistence