29th August – Threat Intelligence Report · 2022-08-29
Researchers have compiled a technical analysis of the GoldDragon malware, used by the North-Korean affiliated Kimsuky (Thallium) APT group. Delivered via spear-phishing, the payload is highly targeted, and will download only when accessed by predetermined email addresses. Among the targets are South-Korean diplomats, professors and researchers.
Political and diplomatic entities in South Korea · 25/08/2022
Researchers from Kaspersky discover GoldDragon, a new campaign by the North Korean nation-state group Kimusky directed against political and diplomatic entities located in its Southern counterpart. [Date Occurred: Since early 2022; Date Discovered: -]
Kimsuky’s GoldDragon cluster and its C2 operations · 2022-08-25T01:00:31
Kimsuky (also known as Thallium, Black Banshee and Velvet Chollima) is a prolific and active threat actor primarily targeting Korea-related entities. In early 2022, we observed this group was attacking the media and a think-tank in South Korea.