TrollAgent That Infects Systems Upon Security Program Installation Process (Kimsuky Group)

AhnLab SEcurity intelligence Center (ASEC) recently discovered that malware strains are downloaded into systems when users try to download security programs from a Korean construction-related association’s website. Login is required to use the website’s services, and various security programs must be installed to log in.

Among the programs that must be installed for login, one of the installers had malware strains inside. When the user downloads and installs the installer, the malware strains are also installed along with the security …

ahnlab asec center construction download installation intelligence kimsuky log login malware malware analysis process program security security intelligence security program security programs services systems trollagent try website