Ongoing Kimsuky campaign involves novel Chrome extension

Attacks with the new Google Translate-spoofing Chrome extension dubbed "TRANSLATEXT" have been deployed by North Korean state-sponsored hacking operation Kimsuky — also known as APT43, Velvet Chollima, Emerald Sleet, Black Banshee, ARCHIPELAGO, and Springtail — as part of a cyberespionage campaign against South Korean academic institutions that has been ongoing since March, according to The Hacker News.

academic apt43 archipelago attacks campaign chrome chrome extension cyberespionage extension google google translate hacking institutions kimsuky march network security north north korean novel sleet south sponsored spoofing springtail state state-sponsored hacking threat intelligence translate