Kimsuky Uses Fake Zoom Installers and Malicious LNK Files to Deploy Malware

Kimsuky Hackers Use Malicious Resume Documents to Deploy Funhouse Ransomware | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #hacker - National Cyber Security Consulting

Kimsuky hackers have used a malicious résumé document to deploy Funhouse ransomware through a chain of scripts and remote access tools. The attack begins with a Hangul Word Processor document disguised as a job application, turning a routine work file into an entry point for malware that ultimately encrypts files. The campaign connects document-based deception […] Thank you for subscribing to our RSS feed!

Kimsuky Operation GitPower Uses GitHub to Deliver Malware and Steal Data

Kimsuky is using GitHub and other trusted code platforms to deliver malware, run commands, and steal data from Ukrainian experts in diplomacy, security, and international policy. The North Korea-linked group’s Operation GitPower combines targeted emails, fake PDF files, and Windows scripts to turn routine work requests into possible entry points for cyber spying. The attacks use conference invitations and research requests to build trust before …

Kimsuky Uses Fake Zoom Installers and Malicious LNK Files to Deploy Malware

North Korea-linked cyber espionage group Kimsuky has expanded its Operation GitPower campaign by using fake Zoom installers and malicious Windows shortcut… Read more →