AhnLab ASEC blog (asec.ahnlab.com)
Unique characteristics of Kimsuky group’s spear phishing emails · 2023-03-16
excerpt: A unique difference with the past cases was discovered during the analysis of the Kimsuky group’s spear phishing URLs. Until now, the group used Fully Qualified Domain Names (FQDN) disguised as famous Korean web portals. An analysis of the URLs collected during the past two months revealed multiple new FQDNs including keywords related to certain […] | attribution sentence: A unique difference with the past cases was discovered during the analysis of the Kimsuky group’s spear phishing URLs.