The Hacker Newsinfo@thehackernews.com (The Hacker News)
Kimsuky deploys HTTPSpy malware, expands toolkit for espionage
Part of the Ruby Sleet story · since 9 Sep 2025
Quiet for 23 weekslast report 29 May3 articles3 outlets
- Tue 9 Sep, 07:05 UTC. GBHackers, first report. APT37 Deploys New Rust and Python Malware Targeting Windows Systems.
- Thu 14 May, 11:30 UTC. Securelist, its first report on the story. Kimsuky updates PebbleDash and AppleSeed with HelloDoor backdoor.
- Fri 29 May, 06:46 UTC. The Hacker News, its first report on the story. Kimsuky deploys HTTPSpy malware, expands toolkit for espionage. This article, 3rd of 3.
Kimsuky, a North Korean hacking group, has launched a new malware called HTTPSpy while expanding its toolkit to include HelloDoor and VS Code Tunnels. These developments highlight an evolution in their infiltration tactics, as they seek to enhance their capabilities for cyber espionage and data extraction. The article emphasizes the increasing need for robust cybersecurity measures to counter this advanced threat landscape.
How the story developed
Quiet for 23 weekslast report 29 May3 articles3 outlets
3 articles from 3 outlets since 9 Sep. Quiet since 29 May. This was the 3rd report, 262 days after the first.
- Tue 9 Sep, 07:05 UTC. GBHackers, first report. APT37 Deploys New Rust and Python Malware Targeting Windows Systems.
- Thu 14 May, 11:30 UTC. Securelist, its first report on the story. Kimsuky updates PebbleDash and AppleSeed with HelloDoor backdoor.
- Fri 29 May, 06:46 UTC. The Hacker News, its first report on the story. Kimsuky deploys HTTPSpy malware, expands toolkit for espionage. This article, 3rd of 3.
- No CVE
- Larger: an outlet’s first report
- Coverage over time
- Quiet time, folded
Show all 3 articles as a listHide the list
- Tue 9 SepDay 01
- APT37 Deploys New Rust and Python Malware Targeting Windows Systems07:05 · GBHackers · First report
Quiet for 35 weeks
Thu 14 MayDay 2471- Kimsuky updates PebbleDash and AppleSeed with HelloDoor backdoor11:30 · Securelist · Picked up again
Quiet for 2 weeks
Fri 29 MayDay 2621- Kimsuky deploys HTTPSpy malware, expands toolkit for espionage06:46 · The Hacker News · Picked up again · This article, 3rd of 3