Larva-24009 Threat Actor’s Spear Phishing Attack Case Report

Larva-24009 Threat Actor’s Spear Phishing Attack Case Report

AhnLab SEcurity intelligence Center (ASEC) recently confirmed that the Larva-24009 threat actor is carrying out spear phishing attacks targeting Korean users. The threat actor has been active since around 2023 and has been primarily using spear phishing attacks targeting global users. Yet it has been recently confirmed that there are

Threat Trend Report on APT Attacks (South Korea) – September 2024 Major Issues on APT Attacks in South Korea

Threat Trend Report on APT Attacks (South Korea) – September 2024 Major Issues on APT Attacks in South Korea

This report covers classification and statistics on APT domestic attacks confirmed during the month of September 2024 and introduces the functions of each type.  Below is a summary of some of the information. [Table of Contents] Overview Trends of APT Attacks in Korea Spear Phishing Attacks Using LNK Files Attacks Using

Threat Trend Report on APT Attacks – August 2024 Major Issues on APT Attacks in South Korea

Threat Trend Report on APT Attacks – August 2024 Major Issues on APT Attacks in South Korea

This report covers classification and statistics on APT domestic attacks confirmed during the month of August 2024 and introduces the functions of each type.  Below is a summary of some of the information.  [Table of Contents] Overview Trends of APT Attacks in Korea Spear Phishing Attacks Using LNK Files Attacks Using

Analysis Report on APT Attack Cases  Using noMu Backdoor

Analysis Report on APT Attack Cases Using noMu Backdoor

AhnLab SEcurity intelligence Center (ASEC) has recently identified attack cases where an unknown threat actor installed various remote control malware targeting Korean users and systems. The threat actor used a range of reverse shells, backdoors, and VNC malware strains, and also utilized RDP for remote screen control. Among the malware

Ransom & Dark Web Issues Week 4, Jun 2024

Ransom & Dark Web Issues Week 4, Jun 2024

ASEC Notes publishes Ransom & Dark Web Issues Week 4, Jun 2024