Skip to content
North Korean Hackers Use Google Ads for Phishing Campaign Against South Korea

North Korean Hackers Use Google Ads for Phishing Campaign Against South Korea

First seen 2 Feb 2026, 00:19 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

North Korean hackers from the Konni threat group have launched a campaign named 'Operation Poseidon' that exploits Google’s advertising infrastructure to distribute phishing links. This tactic targets human rights advocates and South Korean financial institutions, allowing the attackers to bypass traditional email security measures.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 212d ago How this analysis works

More articles in this cluster (1)

Following this threat?

Track Konni and Google in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed