CHM Malware Disguised as North Korea-related Questionnaire (Kimsuky) · 2023-03-08
excerpt: AhnLab Security Emergency response Center (ASEC) has recently discovered a CHM malware which is assumed to have been created by the Kimsuky group. This malware type is the same as the one covered in the following ASEC blog posts and the analysis report on the malware distributed by the Kimsuky group, its goal being the […] | attribution sentence: AhnLab Security Emergency response Center (ASEC) has recently discovered a CHM malware which is assumed to have been created by the Kimsuky group.
대북 관련 질문지를 위장한 CHM 악성코드 (Kimsuky) · 2023-03-08
excerpt: ASEC(AhnLab Security Emergency response Center)은 최근 Kimsuky 그룹에서 제작한 것으로 추정되는 CHM 악성코드를 확인하였다. 해당 악성코드 유형은 아래 ASEC 블로그 및 Kimsuky 그룹 유포 악성코드 분석 보고서에서 소개한 악성코드와 동일하며 사용자 정보 유출을 목적으로 한다. Kimsuky 그룹 유포 악성코드 분석 보고서 – 2022.10.20 윈도우 도움말 파일(*.chm)로 유포되는 APT 공격 – 2022.03.17 코인분실, 급여명세서 위장한 악성 […] | attribution sentence: ASEC(AhnLab Security Emergency response Center)은 최근 Kimsuky 그룹에서 제작한 것으로 추정되는 CHM 악성코드를 확인하였다.
CHM Malware Disguised as North Korea-related Questionnaire (Kimsuky) · March
Annex 59: List of DPRK Cyberthreat actors’ malicious activities monitored by the Panel in 2023 (row 8 of 75, PDF p. 320). DPRK cyber actor: Kimsuky; Report Name: CHM Malware Disguised as North Korea-related Questionnaire (Kimsuky); Case Summary: Kimsuky distributed a CHM file as an email attachment, purporting to be an interview request about the DPRK. Once the recipient accepts the interview request, a password -protected compressed file is sent as an attachment.; Publication Month: March
CHM Malware Disguised as North Korea-related Questionnaire (Kimsuky) · 13 March 2023
Annex 64 (Links to Ahnlab Security Emergency Response Center (ASEC) reports in 2023 (as of July 2023); Source: ASEC), listed under “Kimsuky Group”: “CHM Malware Disguised as North Korea-related Questionnaire (Kimsuky)” (13 March 2023)