Targeting of analysts of North Korean affairs · Jun 2023
Kimsuky used social engineering techniques to deploy ReconShark malware against former South Korean government officials and researchers focused on North Korean affairs. The group focused on expanding access to affected systems and stealing subscriptions to the North Korea-focused news website NKNews.
Think tanks, research universities, and government entities in the United States, Europe, and Asia · 04/05/2023
Researchers from Sentinel Labs reveal that the North Korean group Kimsuky has been observed employing a new version of its reconnaissance malware, now called 'ReconShark,' in an ongoing cyber espionage campaign with a global reach. [Date Occurred: -; Date Discovered: -]
Phishing campaign deploying the ReconShark reconnaissance tool · May 2023 (report)
Para 111: “A cybersecurity firm reported in May that Kimsuky had waged a phishing campaign that invited exchanges on current geopolitical issues to lure targets globally to deploy a new reconnaissance tool, ReconShark, which collects sensitive data and bypasses security mechanisms.”
Kimsuky Evolves Reconnaissance Capabilities in New Global Campaign | SentinelOne · 2023-05-04T13:55:19.000Z
DPRK-linked threat actor deploys previously unseen reconnaissance tool 'ReconShark' in wave of ongoing attacks.