CHM Malware Disguised as North Korea-related Questionnaire (Kimsuky)

AhnLab Security Emergency response Center (ASEC) has recently discovered a CHM malware which is assumed to have been created by the Kimsuky group. This malware type is the same as the one covered in the following ASEC blog posts and the analysis report on the malware distributed by the Kimsuky group, its goal being the exfiltration of user information.

• 
  Analysis Report on Malware Distributed by the Kimsuky Group – Oct 20, 2022


• 
  APT Attack Being Distributed as Windows Help File …

ahnlab analysis asec blog blog posts center chm distributed emergency exfiltration information kimsuky korea malware malware analysis north north korea questionnaire report response security