TLDR InfoSec · ATTACKS & VULNERABILITIES
MULTI-YEAR CAMPAIGN
Summary from the TLDR InfoSec newsletter
Chinese state-sponsored hackers identified as TAG-74 have been conducting a multi-year cyber espionage campaign targeting academic, political, and government organizations in South Korea. The hackers utilize social engineering attacks, including Microsoft Compiled HTML Help (CHM) file lures, to deploy the ReVBShell backdoor and Bisonal remote access trojan.