Kimsuky APT Deploying Linux Backdoor Gomir in South Korean Cyber Attacks

The Kimsuky (aka Springtail) advanced persistent threat (APT) group, which is linked to North Korea's Reconnaissance General Bureau (RGB), has been observed deploying a Linux version of its GoBear backdoor as part of a campaign targeting South Korean organizations.
The backdoor, codenamed Gomir, is "structurally almost identical to GoBear, with extensive sharing of code between

advanced advanced persistent threat apt attacks backdoor bureau campaign cyber cyber attacks general kimsuky korea linux north north korea organizations persistent persistent threat reconnaissance rgb south targeting threat version