Mallory pivots from this family to the IOCs, detections, and named campaigns that touch your stack, and pages you when something new lands.
1 distinct threat actor attributed by public researchers. Open in Mallory to see the full evidence chain and overlapping campaigns.
Characteristics of GoldDragon cluster of Kimsuky group. In early 2022, the Kimsuky group carried out a sophisticated cyber attack against defense, political, and North Korea-related individuals.
1 distinct technique documented for this family, organized by ATT&CK tactic.
For instance, Kimsuky was recently observed using an IP validation method as part of its GoldDragon infection mechanism. The same Intrusion Set also newly implemented a geofencing mechanism in their signature malware Konni RAT, and similar behaviour was observed in the FastSpy infection chain.
For instance, Kimsuky was recently observed using an IP validation method as part of its GoldDragon infection mechanism. The same Intrusion Set also newly implemented a geofencing mechanism in their signature malware Konni RAT, and similar behaviour was observed in the FastSpy infection chain.
3 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
A malware cluster used in a multi-stage Kimsuky intrusion chain to ultimately exfiltrate sensitive information including keyboard input, browser credentials/cookies, and screenshots.
Kimsuky malware/infection mechanism incorporating IP validation to screen targets.
Named malware used by Kimsuky and used to define one of the group's tracked subgroups in the report, but no technical behavior is detailed in this content.
Match every observed IP, domain, and hash against your live telemetry.
Named campaigns wielding this family, with evidence pinned to each claim.
CVEs this family uses for access and lateral movement.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Every documented technique, ranked by evidence weight.
Reddit, Mastodon, and CTI community discussion around this family.