North Korean threat actor Kimsuky targeted South Korean research institutes with a malicious import declaration. Opening the document would give Kimsuky access to the victim’s network.