The Korea University Digital Information Office has warned of recent malware campaigns spreading through compromised university accounts
The email address whfwl@korea.ac.kr belongs to the Korea University (korea.ac.kr) domain. If you are receiving unexpected emails from this address, it is highly likely a phishing or spam email sent via a compromised student or faculty account.
Attackers use real university email accounts to send emails asking recipients to view "security documents" or execute code (often disguised as a Code.txt file or accompanied by a fake instruction PDF)
