BREAKING: North Korean Hacker Groups Kimsuky and Lazarus Unveil Advanced Backdoor Tools
2025. 11. 02.
OSINT 협회
OSINT 정보
BREAKING: North Korean Hacker Groups Kimsuky and Lazarus Unveil Advanced Backdoor Tools
Kimsuky uses ZIP lures and a Go dropper (XOR decryption) with MemLoad persistence via scheduled task to deliver HttpTroy, which loads in memory and uses HTTP POST obfuscated with XOR+Base64.
게시일: 2025. 11. 02.
출처: OSINT 협회 Facebook