Kimsuky targets organizations with PebbleDash-based tools

Securelist·14. Mai 2026, 11:00

Kaspersky researchers analyze a range of new PebbleDash-based tools used in recent Kimsuky campaigns and reveal their connection to the AppleSeed malware cluster.

MITRE ATT&CK Kill Chain (21 Techniken)

Reconnaissance

T1589.001

Credentials

T1592.002

Software

Resource Development

T1583.001

Domains

T1583.003

Virtual Private Server

T1583.004

Server

T1584.001

Domains

T1584.003

Virtual Private Server

Server

Malware

Exploits

Malware

Exploits

Initial Access

T1566

Phishing

Execution

T1053.005

Scheduled Task

T1059.001

PowerShell

T1204.002

Malicious File

Persistence

T1543.003

Windows Service

Defense Evasion

T1218.010

Regsvr32

T1218.011

Rundll32

Collection

T1113

Screen Capture

Command & Control

T1102

Web Service

Themen

GReAT researchAPT reportsTargeted attacksSpear phishingMalwareAPTBackdoorDropperKimsukyRAT

Vollständigen Artikel lesen bei Securelist

MITRE ATT&CK Kill Chain (21 Techniken)

Verwandte Artikel