Kimsuky Threat Group Exploting Chrome Remote Desktop

AhnLab Security Emergency response Center (ASEC) has recently discovered the Kimsuky threat group exploiting Chrome Remote Desktop. The Kimsuky threat group uses not only their privately developed AppleSeed malware, but also remote control malware such as Meterpreter to gain control over infected systems. [1] Logs of the group using customized VNC or exploiting remote control tools such as RDP Wrapper also continue to be detected. [2] This post will summarize recently identified cases of Chrome Remote Desktop exploitation.

The Kimsuky …

ahnlab appleseed asec center chrome control desktop emergency exploiting kimsuky logs malware malware analysis meterpreter remote desktop response security systems threat threat group vnc