THREATOPS
THREAT OPSThreat News › Kim Sooki again? This time, it was disguised as a request for seafood ingredients

Kim Sooki again? This time, it was disguised as a request for seafood ingredients

lowahnlabPublished 2026-09-01

A request to review the purchase of seafood ingredients arrived. When the file is opened, a normal hwp document appears, but while the user is reviewing the contents, a malicious script runs in the background and even registers a scheduled task. It then extracts system information to an external location, downloads and executes additional commands, […]

MITRE ATT&CK techniques

Original source: https://asec.ahnlab.com/en/95217/