ATIP_2023_May_Threat-Trend-Report-on-Kimsuky-Group.pdf (440 KB)

AhnLab ASEC reported that Kimsuky activity increased slightly in May 2023 compared with April. The report notes newly observed top-level domains and small code changes, indicating continued infrastructure and implementation adjustments across Kimsuky operations. ASEC associated the activity with AppleSeed, FlowerPower, Kimsuky, and RandomQuery tracking categories.