AppleSeed Being Distributed to Maintenance Company of Military Bases · 2022-07-21
excerpt: The ASEC analysis team has recently discovered a case of AppleSeed being distributed to a certain maintenance company of military bases. AppleSeed is a backdoor malware mainly used by the Kimsuky group and is actively being distributed to multiple attack targets as of late. AppleSeed Disguised as Purchase Order and Request Form Being Distributed In […] | attribution sentence: AppleSeed is a backdoor malware mainly used by the Kimsuky group and is actively being distributed to multiple attack targets as of late. | target sentence: AppleSeed is a backdoor malware mainly used by the Kimsuky group and is actively being distributed to multiple attack targets as of late.
특정 군부대 유지보수 업체 대상으로 AppleSeed 유포 · 2022-07-21
excerpt: ASEC 분석팀은 최근 특정 군부대 유지보수 업체 대상으로 AppleSeed 악성코드를 유포하는 정황을 포착하였다. AppleSeed 악성코드는 Kimsuky 조직에서 주로 사용되는 백도어성 악성코드로 최근 여러 대상을 타깃으로 활발히 유포하고 있다. 발주서, 품의서를 위장한 AppleSeed 유포 – ASEC BLOG ASEC 분석팀은 최근들어 발주서, 품의서를 위장하여 AppleSeed 악성코드를 유포하는 정황을 포착하였다. AppleSeed는 Kimsuky 조직에서 주로 사용되는 백도어성 악성코드로 시스템에 […] | attribution sentence: AppleSeed 악성코드는 Kimsuky 조직에서 주로 사용되는 백도어성 악성코드로 최근 여러 대상을 타깃으로 활발히 유포하고 있다. | target sentence: ASEC 분석팀은 최근 특정 군부대 유지보수 업체 대상으로 AppleSeed 악성코드를 유포하는 정황을 포착하였다.
AppleSeed attack on Mil. Maintenance Company · July
Annex 76: List of DPRK cyberthreat actors' malicious activities in 2022 monitored by the Panel (table row 19 of 37). RGB Unit: Kimsuky; Case Name: AppleSeed attack on Mil. Maintenance Company; KAC √; VAS: (blank); Publicized Month: July. (Note: RGB Reconnaissance General Bureau, SPH Significant Phishing, KAC knowledge acquisition and espionage, VAS virtual asset seizures.)
“AppleSeed” backdoor distributed to a maintenance company for military bases and companies related to nuclear power plants
Para 138: “In another case, “AppleSeed” backdoor malware used by Kimsuky to allow compromised computers to receive commands from outside attackers was observed being distributed to a maintenance company for military bases and companies related to nuclear power plants. This backdoor malware was also disguised as purchase orders and request forms.”
AppleSeed Being Distributed to Maintenance Company of Military Bases (Kimsuky) · 28 July 2022
Annex 77 (Links to reports from Ahnlab’s ASEC), listed under “Kimsuky Group”: “AppleSeed Being Distributed to Maintenance Company of Military Bases (Kimsuky)” (28 July 2022)