Analysis of the Triple Combo Threat of the Kimsuky Group – Securitricks

216.73.216.86

Analysis of the Triple Combo Threat of the Kimsuky Group

· Published 11/06/2025 22:07 · Modified 11/06/2025 22:18

Essential information

Published: 11/06/2025 22:07
Modified: 11/06/2025 22:18
Tags: 2025-06-11 appleseed apt babyshark dll file execution facebook flowerpower golddragon kimsuky kimsuky group linkedin powershell shell telegram username vmprotect
Related entities: 14 observables, 1 intrusion sets (apt), 9 techniques (mitre), 2 malware, 3 others

Description

The Genians Security Center (GSC) detected an APT (Advanced Persistent Threat) campaign targeting users of Facebook, email, and Telegram in Korea between March and April 2025. The threat actor explored reconnaissance and selected attack targets through two Facebook accounts.