Tuesday, 13 May, 2025

Kimsuky APT Group Deploys Sophisticated Phishing Tactics Targeting Cryptocurrency Wallets

The North Korean-linked Kimsuky APT group launched advanced phishing attacks using obfuscated VBScript and PowerShell scripts to evade detection. The malware targets cryptocurrency wallets, browser credentials, and employs keylogging to harvest sensitive data. It establishes persistence and exfiltrates data to attacker-controlled servers, showcasing enhanced anti-analysis capabilities and a significant evolution in Kimsuky's operational tactics.