内容仅以原始语言提供
class="post-article">
Backdoor PowerShell/VBScript 自2014年起活跃

Kimsuky

Kimsuky Velvet Chollima 2012 Kuzey Kore APT. Shadows of BlackwoodHotel.pdf.lnk otel spy lure. Guney Kore akademi/hükümet.

威胁档案
类型 Backdoor
编程语言PowerShell/VBScript
C2协议HTTP
首次发现2014
目标 Guney Kore/NATO
用途 / 能力
  • Espionage+Backdoor

C2服务器 1

地址 端口 协议 状态 操作
hex.su
443 HTTPS INACTIVE

⚠ C2 地址仅用于威胁情报和防御目的。未经授权访问这些地址属于违法行为。

研究报告 (3)

Yüksek

Kimsuky APT -- Shadows of BlackwoodHotel.pdf.lnk Çift Uzantı, Otel Casusluk Temalı Lure | Yüksek

Kimsuky APT 94KB Shadows of BlackwoodHotel.pdf.lnk cift uzanti LNK. Dark Hotel APT grubu otel spy teması.

阅读报告 →
Kritik

Kimsuky APT -- Shadows of BlackwoodHotel.pdf.lnk LNK Çift Uzantı, PS String Concat Anti-VM | Kritik

Kimsuky 94KB Shadows of BlackwoodHotel.pdf.lnk cekim LNK. PowerShell vmxnet string concat. hex.Su .su TLD.

阅读报告 →
Kritik

Kimsuky -- Shadows_BlackwoodHotel.pdf.lnk, PS vmxnet VM Tespiti, hex.Su C2, Kuzey Kore APT | Kritik

Kimsuky PDF.LNK North Korea APT. vmxnet PowerShell VM tespiti. hex.Su C2. Kurgusal roman lure.

阅读报告 →