[SecList]Kimsuky’s GoldDragon cluster and its C2 operations

[igor51]

Kimsuky’s GoldDragon cluster and its C2 operations

Kimsuky (also known as Thallium, Black Banshee and Velvet Chollima) is a prolific and active threat actor primarily targeting Korea-related entities. In early 2022, we observed this group was attacking the media and a think-tank in South Korea.
Source: Kimsuky’s GoldDragon cluster and its C2 operations