Kimsuky Malware Attack

What is the Kimsuky Malware Attack?

Kimsuky, officially known as the Kim Suky Group, is a cyber-espionage group linked to North Korea. The group has been active since at least 2012 and is primarily focused on gathering intelligence targeting South Korean government entities. According to a recent observation by Rapid7, the group launched an attack leveraging weaponized Microsoft Office documents, ISO files, Windows shortcut (LNK), and CHM files, or Compiled HTML Help files.

What is the recommended Mitigation?

Maintain general …

attack cyber entities espionage gathering government government entities intelligence kim kimsuky korea malware malware attack north north korea rapid7 south targeting what is