Cisco Talos
Cisco Talos documented a spear-phishing campaign that sent HWP documents with embedded EPS objects exploiting CVE-2013-0808 to download and launch ROKRAT, using a compromised Yonsei University email address (kgf2016@yonsei.ac.kr) tied to the Korea Global...
Phishing & Social Engineering
Cisco Talos
Cisco Talos reviewed a year of campaigns by an actor it calls Group 123, linking them through shared code and PDB compiler artifacts, with the "Golden Time", "Evil New Year", "North Korean Human Rights", "FreeMilk" and "Are You Happy?" campaigns mainly...
Phishing & Social Engineering
