IT Security News - Cybersecurity, Infosecurity News

www.itsecuritynews.info • October 14, 2026

North Korea-linked cyber espionage group Kimsuky has expanded its Operation GitPower campaign by using fake Zoom installers and malicious Windows shortcut files to target Ukrainian experts working in diplomacy, security, and international policy. Researchers at Genians Security Center found that the campaign combines -baiting spear phishing, PDF-themed LNK files, public code-hosting platforms, hidden PowerShell execution, […]

Read the original article:

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Kimsuky Hackers Target Ukrainian Experts with Malware-laden Emails North Korean cyber espionage group Kimsuky has intensified its Operation GitPower, targeting Ukrainian diplomats and security experts with malicious emails disguised as conference invitations. The attacks utilize fake Zoom installers, malicious LNK files, and deceptive documents to deploy malware, including Funhouse ransomware. Researchers from Genians Security Center have identified these tactics as part of a broader campaign to gather intelligence on Ukraine's military efforts. The campaign combines spear phishing techniques with trusted platforms like GitHub for malware delivery. Most observed attacks have reportedly failed, but the potential for significant data theft remains. The attacks are ongoing, and experts advise vigilance against such deceptive tactics. 2 sources 63

Extracted Entities

IT Security News - Cybersecurity, Infosecurity News

The full story

Extracted Entities

APT Groups (1)

Attack Types (1)

Campaigns (1)

Countries (1)

MITRE ATT&CK (2)

Platforms (1)

Tools (1)