Kimsuky Group Using Meterpreter to Attack Web Servers

AhnLab Security Emergency response Center (ASEC) has recently discovered the distribution of malware targeting web servers by Kimsuky group. Kimsuky is a threat group deemed supported by North Korea and has been active since 2013. At first, they attacked North Korea-related research institutes in South Korea before attacking a Korean energy corporation in 2014. Since 2017, their attacks have been targeting countries other than South Korea as well. [1]

ASEC has been providing the analysis of various cases of Kimsuky …

ahnlab asec attack center distribution emergency energy kimsuky korea malware malware analysis meterpreter north north korea research response security servers south south korea targeting threat threat group web