Kimsuky

Kimsuky is conducting cyberattacks by integrating generative AI into its methods. They use this technology to produce phishing documents that are themed around various financial areas, including digital assets, investment strategies, and fintech services. These attacks primarily target the crypto and finance sectors.

Kimsuky, a North Korean state-sponsored threat actor, has launched cyber attacks against South Korean military and corporate entities using HTTPSpy, HelloDoor, and VS Code Tunnels. The attacks involved social engineering tactics like spoofed security software pages and fake Webex meeting links.