Kimsuky Group Uses AutoIt to Create Malware (RftRAT, Amadey)

1. Overview

The Kimsuky threat group, deemed to be supported by North Korea, has been active since 2013. At first, they attacked North Korea-related research institutes in South Korea before attacking a South Korean …

access amadey attack autoit cases control infection infostealer keylogger kimsuky korea latest lnk loader malware malware analysis north north korea phishing phishing attack spear phishing threat threat group xrat