Windows defenders should treat the newly exposed Kimsuky artifacts as hunting leads, not network blocklist entries. Genians Security Center’s August 10 report ties a fresh cluster it calls Operation GitPower to malicious .lnk shortcuts, hidden PowerShell, scheduled-task persistence, and...
Original release date: October 27, 2020
Summary
This advisory uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) version 7 framework. See the ATT&CK for Enterprise version 7 for all referenced threat actor tactics and techniques.
This joint cybersecurity advisory...
apt
command and control
credential harvesting
cyber threats
cybersecurity
data exfiltration
espionage
hidden cobra
incident response
keylogger
kimsuky
malware
mitre att&ck
north korea
phishing
security best practices
social engineering
spear phishing
tactics
threat intelligence
