North Korea-linked APT attack found disguised as a digital asset wallet service customer center
Excerpt
blog.alyac.co.kr/4501
Detailed content
body title
North Korea-linked APT attack found disguised as a digital asset wallet service customer center!
Malware analysis report
by pill 4 2022. 2. 16. 14:55
main text
Hello? This is the East Security Security Response Center (ESRC).
A malicious file disguised as the Klip customer center was recently discovered, and users need to be extra careful.
2/5
Klip is a digital asset wallet service developed by Ground X, a blockchain-related subsidiary of Kakao. The file found this time was distributed under the file name '[Klip Customer Center] Mistransmission_Token Resolution_Guide.doc'.
[Figure 1] Screen inducing user…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by app.box.com on app.box.com.
More from app.box.com4
- Inexsmar: An unusual DarkHotel campaigapp.box.com · Added 2 May
- UAC-0056 cyberattack on Ukrainian authorities using GraphSteel and GrimPlant malwareapp.box.com · Added 1 May
- Operation Triangulation: The last (hardware) mysteryapp.box.com · Added 17 Dec 2024
- Operation ShadowCat: Targeting Indian Political Observers via a Stealthy RATapp.box.com · Added 1 Aug 2024
On the same topics
- Retrohunting APT37: North Korean APT used VBA self decode technique to inject RokRatMalwarebytes · Published 5 Jan 2021
- Kazuar (Malware Family)Malpedia · Added 18 Oct
- Chinese Nation-State Hackers Target U.S in Operation TradeSecret, Report Claimseweek.com · Published 6 Apr 2017
- Taiwan High-Tech Ecosystem Targeted by Foreign APT Group:Medium · Published 10 Jun 2022