Skip to content
Kimsuky Uses Fake Zoom Installers and Malicious LNK Files to Deploy Malware

Kimsuky Uses Fake Zoom Installers and Malicious LNK Files to Deploy Malware

Ground.News • October 14, 2026

Kimsuky Hackers Use Malicious Resume Documents to Deploy Funhouse Ransomware | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #hacker - National Cyber Security Consulting

Kimsuky hackers have used a malicious résumé document to deploy Funhouse ransomware through a chain of scripts and remote access tools. The attack begins with a Hangul Word Processor document disguised as a job application, turning a routine work file into an entry point for malware that ultimately encrypts files. The campaign connects document-based deception […] Thank you for subscribing to our RSS feed!

Kimsuky Operation GitPower Uses GitHub to Deliver Malware and Steal Data

Kimsuky is using GitHub and other trusted code platforms to deliver malware, run commands, and steal data from Ukrainian experts in diplomacy, security, and international policy. The North Korea-linked group’s Operation GitPower combines targeted emails, fake PDF files, and Windows scripts to turn routine work requests into possible entry points for cyber spying. The attacks use conference invitations and research requests to build trust before …

Kimsuky Uses Fake Zoom Installers and Malicious LNK Files to Deploy Malware

There is no tracked Bias information for the sources covering this story.

To view factuality data please Upgrade to Premium

To view ownership data please Upgrade to Vantage

Extracted Entities

APT Groups (1)

Attack Types (1)

Campaigns (1)

Platforms (2)

Ransomware Groups (1)