North Korea-linked threat actor Kimsuky has been observed targeting organizations in South Korea and Japan with spear-phishing campaigns that combine malicious Windows shortcuts, PowerShell payloads, legitimate remote-access software, and an apparent AI-generated Chrome extension designed to exfiltrate Gmail messages and attachments. According to ENKI, the campaign highlights how Kimsuky is blending commodity tools with tailored […]
The post Kimsuky Hackers Use AI-Generated Chrome Extension to Steal Gmail Data appeared first on Cyber Security News.