CHM Malware Stealing User Information Being Distributed in Korea

AhnLab SEcurity intelligence Center (ASEC) has recently discovered circumstances of a CHM malware strain that steals user information being distributed to Korean users. The distributed CHM is a type that has been constantly distributed in various formats such as LNK, DOC, and OneNote from the past. A slight change to the operation process was observed in the recent samples.

• Related Posts
  (June 23rd, 2023) Malware Disguised as HWP Document File (Kimsuky)
  (March 24th, 2023) OneNote Malware Disguised as Compensation Form …

ahnlab asec center change chm distributed doc information intelligence korea lnk malware malware analysis onenote security security intelligence stealing