Tia N.List

Reported by 1 outlet

ASEC June 2026 APT Attack Report (South Korea)

hot0.0
Why this score
Breadth
0.50 / 2.0 · 1 source
Authority
1.00 / 2.0 · best outlet weight
Severity
0.50 / 5.0 · CVSS + content signals
Velocity
0.00 / 2.0 · updates in 48h
Pickup speed
0.00 / 0.6 · time to second source
Recency
× 0.00 temporal multiplier
Community
+ 0.00 / 1.5 · reddit signal
Score
0.0 / 10 = base × recency + community
asec.ahnlab.com first seen 82d ago

Timeline

  1. original reporting

    ASEC June 2026 APT Attack Report (South Korea)

    asec.ahnlab.com · 82d ago · July 24th, 2026

    AhnLab's ASEC published its monthly APT threat report for Korea:

    • LNK file phishing accounted for the highest proportion of APT initial access

    • Threat actors used work-related document filenames and email lures

    • Types of malware deployed: AutoIt malware (Type A), HTA downloaders via curl.exe (Type B), XenoRAT and infostealers (Type C), Python-script-based backdoors (Type D)

    • GitHub and Google Drive used as download hosts for payloads

    Takeaway: Korean organizations face a consistent APT phishing threat with evolving payload delivery methods. LNK-based initial access and cloud-hosted payloads are the dominant trends.


Source on GitHub