Kimsuky Hackers Use Russian Emails for Credential Theft; Deliver NetSupport RAT and BurnsRAT

Recent cybersecurity reports highlight a surge in phishing attacks orchestrated by the North Korean hacking group Kimsuky. This group has adapted its tactics by utilizing Russian email services, such as Mail.ru, to disguise their phishing attempts aimed at credential theft. Additionally, the Horns & Hooves campaign has been identified as a significant vector for delivering Remote Access Trojans (RATs) like NetSupport RAT and BurnsRAT through fake emails and JavaScript payloads. Various sources, including The Hacker News and Securelist, have provided insights into these evolving threats, emphasizing the need for heightened vigilance in cybersecurity practices.