Kimsuky APT Using Newly Discovered Gomir Linux Backdoor

The Kimsuky APT group, which is closely linked to the North Korean military intelligence organization, has been deploying a newly discovered Linux backdoor in attacks against organizations in South Korea.

The backdoor is known as Gomir and is closely related to another piece of malware called GoBear, which is built for Windows targets. Researchers from Symantec discovered Gomir and said that it is also linked to Troll Stealer, an info stealer that Kimsuky was distributing in the last few …

apt apt group attacks backdoor called intelligence kimsuky korea linux malware military north north korean organization organizations piece south south korea windows