ATIP_2023_Jul_Threat-Trend-Report-on-Kimsuky-Group.pdf (523 KB)

AhnLab ASEC reported that Kimsuky activity in July 2023 showed FlowerPower gaining traction while the group diversified its attack methods. AppleSeed and RandomQuery activity did not show major changes and appeared to be used less. ASEC also began incorporating BabyShark into the monthly statistics from July onward, reflecting changes in how the group’s activity was categorized.