The Kimsuky hacking group is exploiting improper configurations of an email protection feature known as DMARC, US agencies say.

North Korean hackers are exploiting an email security flaw in attacks used to gather sensitive intelligence and information, a new U.S. cybersecurity advisory warned.

In a concerted effort to thwart a pernicious email hacking scheme orchestrated by North Korean operatives, American officials are raising the alarm and urging institutions to fortify their cyber defenses.

In doing so, the threat actors can send spoofed emails as if they are from a legitimate domain's email server. The abuse of weak DMARC policies has been attributed to a North Korean activity cluster tracked by the cybersecurity community under the name Kimsuky (aka APT43,