Kimsuky's New Golang Stealer 'Troll' and 'GoBear' Backdoor Target South Korea

The North Korea-linked nation-state actor known as Kimsuky is suspected of using a previously undocumented Golang-based information stealer called Troll Stealer.
The malware steals "SSH, FileZilla, C drive files/directories, browsers, system information, [and] screen captures" from infected systems, South Korean cybersecurity company S2W said in a new technical report.
Troll

actor backdoor browsers called cybersecurity cybersecurity company drive files filezilla golang information information stealer kimsuky korea malware nation nation-state actor north north korea report s2w screen south south korea ssh state stealer system systems target technical troll undocumented