2022 Threat Trend Report on Kimsuky

In comparison to 2021, 2022 was a year filled with invisible activities, new attack types, Fully Qualified Domain Names (FQDN), and attack preparations.

AhnLab identified a significantly higher number of these activities in comparison to 2021. One of these cases involved an incorrect configuration of C2 servers, causing the files within the said servers to be exposed and allowing AhnLab to procure samples, server information files, and variant samples that had never been known externally. 

The threat actors are using …

ahnlab attack cases configuration domain domain names exposed files higher information kimsuky malware analysis names report server servers threat trend types