Kimsuky targeted South Korean military and corporate entities with fake security software and Webex lures to deliver HTTPSpy and other payloads, while using techniques like JSONPing and stolen meeting schedules to improve infection success. Kaspersky also reported that Kimsuky is evolving its toolset with VS Code tunneling, DWAgent, and new malware...

Groups Conversations All groups and messages Sign in Technical - Application Security Conversations About Privacy • Terms     Kimsuky's Advanced Attack Techniques: JSONPing, Webex Spoofing, and a New HttpSpy Variant 0 views Eyal Estrin unread, 5:15 AM (4 minutes ago)    to https://www.enki.co.kr/en/media-center/blog/kimsuky-s-advanced-attack-techniques-jsonping-webex-spoofing-and-a-new-httpspy-variant Eyal Estrin Author | Cloud Architect | AWS • Azure • GCP Insights Social: @eyalestrin Connect: https://linktr.ee/eyalestrin Blog: https://security-24-7.com Reply all Reply to author Forward