AhnLab ASEC blog (asec.ahnlab.com)
APT Attack Cases of Kimsuky Group (PebbleDash) · 2021-12-21
excerpt: The ASEC analysis team has been keeping an eye on the trend of malware that attempts APT attacks, sharing findings on the blog. In this confirmed case, PebbleDash backdoor was used in the attack, but logs of AppleSeed, Meterpreter, and other additional malware strains were also found. PebbleDash Backdoor The attacker sent the following spear […] | attribution sentence: The Kimsuky group uses the pif dropper that is similar to the dropper mentioned above when installing AppleSeed.