Web: https://malware.news/t/unique-characteristics-of-kimsuky-group-s-spear-phishing-emails/67924

March 16, 2023, 6:21 a.m. | MalBot

Malware Analysis, News and Indicators - Latest topics malware.news

A unique difference with the past cases was discovered during the analysis of the Kimsuky group’s spear phishing URLs. Until now, the group used Fully Qualified Domain Names (FQDN) disguised as famous Korean web portals. An analysis of the URLs collected during the past two months revealed multiple new FQDNs including keywords related to certain Korean banks, instead of the past FQDNs disguised as web portals.


 


Unique characteristics of Kimsuky group’s spear phishing emails


The post Unique characteristics of Kimsuky …

emails kimsuky malware analysis phishing phishing emails spear phishing

OCIO-0020 Expert on Enterprise Cyber-related Exercises Support (NS) - MON 3 Apr

@ EMW, Inc. | Brussels, Brussels, Belgium

Senior Consultant (m/w/d) IT Security Management - remote/ onsite

@ MVI Group GmbH | München, Germany

Cyber Security Analyst II - Remote Contract (3913-W)

@ Stout Systems | New York City, United States - Remote

Sr Cyber Security Advisor - S Atlantic Enterprise

@ Optiv | Atlanta, GA

Director, Information Security Operations (Ottawa, ON)

@ SSENSE | Ottawa, ON, Canada

Senior Security Engineer - Threat Detection

@ Samsara | San Francisco, CA

Information Security Engineer

@ NMI | Bristol, England, United Kingdom - Remote

Co-op Student - IT Compliance

@ BusPatrol | Remote

Incident Response Manager

@ matchpoint solutions | Houston, Tx, Houston, Tx, United States

Consultant(e) réseau / sécurité H/F - Innovative Tech

@ Devoteam | Nantes, France

DevSecOps Security Consultant 2023 ECL

@ Bosch Group | Bengaluru, India

Staff Back-end Engineer [Security Architecture & Engineering]

@ Coupang | Seoul, South Korea