AhnLab's October 2023 Kimsuky trend report says Kimsuky activity decreased slightly from September but still included BabyShark, RandomQuery, and FlowerPower-related activity. ASEC found one phishing domain and classified it as BabyShark because it used BabyShark infrastructure. The report also notes a compound case where FlowerPower and RandomQuery were distributed together, along with further FlowerPower system changes through script fragmentation.