AhnLab ASEC blog (asec.ahnlab.com)
APT Group Profiles – Larva-24005 · 2025-04-14
excerpt: 1) Introduction During the breach investigation process, the AhnLab SEcurity intelligence Center (ASEC) discovered a new operation related to the Kimsuky group and named it Larva-24005.1 The threat actors exploited the RDP vulnerability to infiltrate the system. They then changed the system configuration by installing the MySpy malware and RDPWrap to create […] | attribution sentence: 1) Introduction During the breach investigation process, the AhnLab SEcurity intelligence Center (ASEC) discovered a new operation related to the Kimsuky group and named it Larva-24005. | target sentence: 2) Targets and Cases These threat actors have been attacking South Korea’s software, energy, and financial industries since October 2023 and have been sending phishing emails to South Korea and Japan.