"Do Not Click '10% Off Airfare'... Phishing Emails Impersonating Korean Air Circulating"

Clickbait Claiming NFT Issuance
Clicking the Text Redirects to a Phishing Page

As the peak vacation season approaches and air travel is significantly increasing, a phishing email impersonating Korean Air has recently been circulated, claiming to offer benefits such as airline ticket discounts in celebration of issuing non-fungible tokens (NFTs), prompting users to exercise extra caution.

Korean Air Impersonation NFT Phishing Email
[Image Source=Yonhap News]

According to the aviation industry on the 11th, an email titled "Korean Air NFT Issuance, Unlimited 10% Discount Coupon Benefits!" was recently sent to an unspecified large number of internet users, including Korean Air members. The email states that "owning NFTs released by Korean Air provides benefits such as free tickets to Japan and 10% discount coupons on all airline tickets." It also informs that NFTs sold on the official website will be issued for free to the first 75 people.

At the bottom of the email, the CEO’s name, address, business registration number, and personal information protection officer’s name are listed to make it appear as if the email was sent by Korean Air. However, Korean Air has announced that it has not issued any NFTs itself and that the email was not sent by Korean Air. Korean Air’s official sending email addresses are '@koreanair.com' or '@koreanair.co.kr', but the sender address of this NFT-related email is '@korean-airs.monster'.

Starbucks Phishing Email [Image Source=Yonhap News]

If the "Buy Now" button in this phishing email is clicked, malware may be installed on the recipient’s computer or mobile device. Recently, similar phishing emails impersonating Starbucks or Lotte Home Shopping, claiming to distribute NFTs for free, have also been circulated. Clicking the links in such emails leads users to phishing pages that steal their cryptocurrency wallets, potentially causing significant damage.

A Korean Air official stated, "Korean Air is posting notices on its website and sending cautionary emails to individual customers to minimize customer damage caused by malicious impersonation emails," adding, "We are also considering cooperation with external agencies regarding these malicious impersonation cases." They also urged users not to click on attachments or URLs in emails from unknown sources that were not officially sent by Korean Air.

This content was produced with the assistance of AI translation services.