According to Wu, Slow Mist's Chief Information Security Officer 23pds stated that a member of the suspected North Korean hacker group Kimsuky APT has encountered a significant data breach, with hundreds of GB of internal files and tools leaked. Analysis shows that the intrusion occurred in early June 2025, exposing their backdoor, phishing framework, and reconnaissance operation details. The leaked data comes from two compromised systems of the Kimsuky operator known by the alias "KIM", which include a Linux development workstation running Deepin 20.9, and a public VPS used for spear phishing activities.

APT-6.73%
KIM13.24%
View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • Comment
  • Repost
  • Share
Comment
0/400
No comments
Trade Crypto Anywhere Anytime
qrCode
Scan to download Gate app
Community
English
  • 简体中文
  • English
  • Tiếng Việt
  • 繁體中文
  • Español
  • Русский
  • Français (Afrique)
  • Português (Portugal)
  • Bahasa Indonesia
  • 日本語
  • بالعربية
  • Українська
  • Português (Brasil)