2022 Threat Trend Report on Kimsuky

Web: https://asec.ahnlab.com/en/49520/

In comparison to 2021, 2022 was a year filled with invisible activities, new attack types, Fully Qualified Domain Names (FQDN), and attack preparations. AhnLab identified a significantly higher number of these activities in comparison to 2021. One of these cases involved an incorrect configuration of C2 servers, causing the files within the said servers to be exposed and allowing AhnLab to procure samples, server information files, and variant samples that had never been known externally.  The threat actors are using... …

appleseed braveprince credentialstuffing cve-2022-30190 flowerpower follina ftp golddragon keylogger kimsuky quasar quasarrat report thallium threat trend xrat