Novel spear-phishing campaign features trojanized PuTTY SSH client

BleepingComputer reports that North Korean hacking operation UNC4034, also known as Labyrinth Chollima or Temp.Hermit, has been leveraging a trojanized iteration of the PuTTY and KiTTY SSH utility in a new spear-phishing operation aimed at facilitating the delivery of the AIRDRY.V2 backdoor.

campaign client features phishing phishing campaign putty ssh threat intelligence