Kimsuky Operation is a North Korea–linked cyber-espionage campaign attributed to the Kimsuky group, focused on political and governmental targets.
Kimsuky Operation is a North Korea–linked cyber-espionage campaign attributed to the Kimsuky group, focused on political and governmental targets. Recent reporting indicates the group distributes KimJongRAT using illicit HTA files, highlighting HTA-based delivery as a key tactic to establish backdoor access on Windows systems.
The KimJongRAT malware, linked to the North Korean Kimsuky group, is targeting Windows systems through phishing emails. These emails contain a ZIP archive disguised as a tax notice, which, when opened, executes a…