UN Panel of Experts S/2023/656
Disguised malicious attachments (Word macro, CHM, OneNote) leaking victim data
Para 108: “A cybersecurity firm reported that Kimsuky has been distributing disguised malicious file attachments – Word macro documents, Microsoft Compiled HTML Help files, OneNote files, etc. – which, when executed, leak data from the victim’s computer, including system information and installed antivirus software.”