Kimsuky lures companies into infection with malicious emails posing as business partner replies

A case was detected in which North Korean hacking group Kimsuky sent malicious emails disguised as replies from companies' business partners, infecting recipients with malware. The emails posed as the delivery of a periodic inspection report and a laptop price quote enquiry, and running a PIF file inside an attached archive launched a backdoor along with a legitimate PDF document. The names of the affected companies, the date, the scale of the damage and the response have not been disclosed.