North Korean Hackers Deploy New KLogEXE and FPSpy Malware in Targeted Attacks
Two new malware variants, KLogEXE and FPSpy, have been used by threat actors connected to North Korea.
An enemy identified as Kimsuky—also known as APT43, ARCHIPELAGO, Black Banshee, Emerald Sleet (formerly Thallium), Sparkling Pisces, Velvet Chollima, and Springtail—has been linked to the activities.
Researchers Daniel Frank and Lior Rochberger from Palo Alto Networks Unit 42 noted that these samples show off Sparkling Pisces' ever-expanding armament and its ongoing evolution.
The threat actor, who has been active since at least 2012, has earned the moniker "king of spear phishing" for his skill at tricking people into downloading malware by pretending to be trusted sources in emails read more about North Korean Hackers Deploy New KLogEXE and FPSpy Malware in Targeted Attacks.
...