ASEC found a GitHub repository while analyzing malware tied to the Kimsuky group. The repository contained a FlowerPower malware type distributed since 2020, and ASEC said user information leaked through that GitHub location had also been uploaded there. The repository remained accessible at the time of analysis on July 5, giving defenders concrete infrastructure and tooling artifacts to correlate with earlier FlowerPower and Kimsuky activity.