Kimsuky Uses SharpExt To Gather Intelligence From Stolen Email
The threat actor tracked as Kimsuky continue to deliver booby trapped documents to targets that are laced with browser extension malware.
Once received and executed, the malicious Hangul Word Processor (HWP) files communicate with the threat actor controlled C2 to gather the SharpEXT browser extension that is leveraged to steal emails and attachments from the victims in the United States, South Korea, and Europe.
Featured Resources
View More Resources
Cymulate Stories: A Fireside Chat with Morgan Street Holdings
Many organizations still manage cyber risk using reactive security practices that struggle to keep pace with today’s threat landscape. As
The Race to Ship AI Tools Left Security Behind. Part 1: Sandbox Escape
AI tools shipped fast - but weak sandboxing left escape paths, exposing systems to data access, abuse, and full compromise.
Exposure Validation: Continuous Testing Should Drive Continuous Improvement
What’s your end goal? How exactly does this security project make you more secure? Like any technology initiative, those two