News North Korean hackers drop new malware to steal data from South Korean targets‘Troll Stealer’ uses valid certificates to pass as legitimate ROK security programs while stealing system information A North Korean cybercrime group is distributing new malware to steal information from South Korean targets, potentially including administrative and public organizations, according to security researchers. The threat group Kimsuky disguised its new “infostealer” as a legitimate security program installation file, South Korean cyber threat intelligence company Safe and Secure World (S2W) said in a report Wednesday. The malware, developed using Go programming language and dubbed “Troll Stealer” by S2W, is designed to steal information from compromised computers before encrypting and sending it to the attackers’ server. The firm attributed the © Korea Risk Group. All rights reserved. |