---
id: 6281
title: "Suspected DPRK Phishing Campaign Targets Naver; Separate Apple Domain Spoofing Cluster Identified"
source_domain: hunt.io
source_url: "https://hunt.io/blog/dprk-phishing-targets-naver-apple-domain-spoofing"
published_at: "2024-10-29T00:00:00Z"
tags: ["phishing", "apple", "dprk", "tls-certificates", "domain-spoofing", "naver"]
phying_url: "https://phying.com/item/6281"
lang: en
---

# Suspected DPRK Phishing Campaign Targets Naver; Separate Apple Domain Spoofing Cluster Identified

## Summary

Hunt.io finds an exposed Naver phishing server—change/cookie/login panels and 200+ hosted domains—plus a separate cluster spoofing Apple domains with distinctive TLS certificates.

## Intelligence Metadata

- **Sources:** hunt.io
- **Published:** 2024-10-29T00:00:00Z
- **Original:** https://hunt.io/blog/dprk-phishing-targets-naver-apple-domain-spoofing
- **Phying News:** https://phying.com/item/6281