AhnLab ASEC blog (asec.ahnlab.com)
Malicious Word File Disguised as ‘Purchase and Sales Agreement for Export-bound Gold Bars’ · 2021-08-24
excerpt: The ASEC analysis team discovered a malicious word document disguised as ‘Purchase and Sales Agreement for Export-bound Gold Bars’ and would like to inform the readers about it through this post. Judging by the title and body text of the original document on which the distributed document is based, it appears that the original was […] | attribution sentence: Note that the password used to remove protection is the same as the one used by the malware introduced in an ASEC blog post: ‘Malicious North Korea-related Materials.’ The document was also mentioned by a global Twitter post below as a Kimsuky-related APT malware .