Phishing Campaign Impersonates Korean Agencies to Steal Naver Credentials

• •Phishing emails impersonate Korean government agencies to steal Naver account credentials.
• •Users are lured by urgent subject lines related to taxes and police requests.
• •Naver advises against clicking links in emails and recommends verifying through official channels.

On August 24, 2026, Naver issued a warning about phishing emails impersonating various Korean government agencies, including Wetax and the National Police Agency, aimed at stealing user account information. These emails feature deceptive subject lines related to tax bills and police requests, enticing users to click on malicious links. Clicking these links directs users to fake Naver login pages that appear legitimate but are designed to capture passwords. Naver emphasized that legitimate agencies do not request passwords via email and advised users to verify information through official channels. The phishing emails are crafted to look authentic, including logos and contact details of real agencies. Users are urged to avoid clicking links in suspicious emails and to enable two-step verification for added security. If users have already entered their passwords on these fake sites, they should change them immediately.