North Korean Threat Group Kimsuky Exploiting Google Chrome Remote Desktop in New Campaign

South Korean cybersecurity firm AhnLab Security Emergency response Center (ASEC) has reported that the North Korean threat group, Kimsuky, is now using the remote functionality of Google’s Chrome browser to gain control over compromised systems.

Kimsuky is known for its phishing campaigns and data theft operations, and is now targeting users through Chrome Remote Desktop.

The group is using its AppleSeed backdoor malware, as well as other tools including virtual networking computing tools and the Meterpreter backdoor. NK News reports.