Hackmageddon cyber attacks timelines (Paolo Passeri)
South Korean groupware software vendors and their SaaS customers · 2026-07-20
ENKI WhiteHat uncovers a Kimsuky campaign that breached South Korean groupware vendors via RCE and social engineering, deployed Gomir malware, harvested credentials through tampered login pages, and pivoted to steal vendor customer data. [Date Occurred: From 2025 through early 2026.; Date Discovered: From 2025 through early 2026.]