Inside Kimsuky's Abuse of Legitimate Remote Control Tools Across Northeast Asia

Reported 20 Aug 2026 by otx · Severity: medium

Kimsuky conducted spear phishing campaigns against South Korean and Japanese targets during the first half of 2026, distributing LNK malware through OneDrive share links. The malicious files established scheduled tasks that periodically fetched PowerShell scripts from command-and