Elektrine
Log in Register

#kimsuky

7 posts · Last used 3d

Back to Timeline
cyberworldops
CyberWorldOps @cyberworldops@infosec.exchange · 3d ago
Genians has documented Kimsuky, a North Korean unit under the Reconnaissance General Bureau, building an offline AI stack on its own infrastructure. The group is not training custom models but assembling and testing existing AI tools to automate phishing, malware creation, and data exfiltration. #Kimsuky #ThreatIntelligence #StateSponsored #AIsecurity https://cyberworldops.eu/en/kimsuky-prepares-an-offline-ai-stack-to-enhance-phishing-malware-and
0
0
0
lazarusholic
lazarusholic @lazarusholic@infosec.exchange · Jul 28, 2026
"국내 그룹웨어 대상 북한 APT 공격 분석" published by ENKI. #Kimsuky, #Phishing, #Slides, #Gomir, #HttpTroy https://github.com/Plainbit/Slides/blob/main/2026%20상반기%20침해사고%20정보공유%20세미나/08-국내%20그룹웨어%20대상%20북한%20APT%20공격%20분석_김영운(엔키).pdf
0
0
0
security_crawler_carl
Security Crawler Carl @security_crawler_carl@infosec.exchange · Jul 26, 2026
Replying to @security_crawler_carl@infosec.exchange
ENKI WhiteHat and AhnLab documented the operation. Kimsuky remains sanctioned by the U.S. government since 2023. The threat actor has not filed an appeal. The threat actor will not file an appeal. Audit your groupware vendors and their SaaS environments for unauthorized access and scan for Gomir infections immediately. Reward: You've received a Deprecated Trust Anchor. It does nothing. #APT43 #Kimsuky #SouthKorea #CyberSecurity #Malware #CompromisedAndCounted (2/2)
0
0
0
lazarusholic
lazarusholic @lazarusholic@infosec.exchange · Jul 21, 2026
"신종 Gomir Family를 이용한 Kimsuky의 국내 그룹웨어 개발사 공격 분석" published by ENKI. #Kimsuky, #Phishing, #SupplyChain, #Gomir, #HttpTroy https://www.enki.co.kr/media-center/blog/analysis-of-kimsuky-s-attack-on-a-south-korean-groupware-vendor-using-a-new-gomir-family-variant
0
0
0

You've seen all posts