Researchers have uncovered operational artifacts linked to a suspected Kimsuky campaign that expose how the threat actor tested malware, handled infected-host data, and used public code repositories as command-and-control infrastructure. The findings are part of an ongoing activity cluster tracked as Operation GitPower, which researchers assess continues Kimsuky’s earlier FlowerPower-style use of malicious Windows shortcut […]
The post Kimsuky Testing Leaves Internal IP and Attack Infrastructure Artifacts Exposed appeared first on Cyber Security News.