North Korean advanced persistent threat (APT) group known as Kimsuky is actively attacking commercial-sector businesses, U.S. agency says. Primary targets include think-tanks, diplomatic and high-level organizations in Japan, South Korea and the United States. Group has been operating as a cyberespionage group since 2012 under the auspices of the regime in Pyongyang. Its mission is global intelligence gathering, CISA noted. Group uses spearphishing, watering-hole attacks, torrent shares and malicious browser extensions to gain initial foothold in networks.
Source: https://threatpost.com/north-korea-spy-reporters-feds-warn/160622/