02-09-2026
Kimsuky again? This time disguised as a seafood ingredients purchase request form
https://asec.ahnlab.com/ko/95216/
Report completeness: Low
Actors/Campaigns:
Kimsuky (motivation: information_theft)
Victims:
Seafood industry, South korea
Geo:
South korea
TTPs:
Tactics: 1
Technics: 0
ChatGPT TTPs:
do not use without manual checkT1027, T1027.009, T1027.013, T1036, T1041, T1053.005, T1059.001, T1059.007, T1070.004, T1082, have more...
IOCs:
File: 4
Command: 1
Domain: 1
Url: 3
Soft:
task scheduler
Algorithms:
zip, xor
Languages:
powershell, javascript