Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
13 IOCs
North Korean Hackers Use AI to Mass-Produce Convincing Phishing Documents
Threat Actors
Excerpt
Security researchers have uncovered fresh evidence that North Korean-linked Kimsuky hackers are using artificial intelligence to rapidly create phishing documents that look like routine business files. The campaign, tracked as Operation GitPower, combines AI-made decoys with malicious Windows shortcut files, hidden PowerShell scripts, GitHub-hosted payloads, and scheduled tasks that maintain access to compromised machines. Genians Security Center examined 13 malicious LNK…
Read the original report →Diamond Model
Adversary(1)
Infrastructure
Capability
Victim
Indicators of Compromise
Open the mindmap →13 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| MD5 | e50f2ae7fb03675a1ef58b1cf9cda6d1 | Medium | Score 53/100 | First seen |
| MD5 | 1523a2fcc901965ab4568d9fe829e4af | Medium | Score 53/100 | First seen |
| MD5 | d0894d4626aae0f96d6b84ca3bb71a36 | Medium | Score 53/100 | First seen |
| MD5 | 7a53089053b1381742856a5cf2b95f8b | Medium | Score 53/100 | First seen |
| MD5 | 900e832c10d851bbdef3fb191a15db0e | Medium | Score 53/100 | First seen |
| MD5 | 685bfc6b2c29fbc16cfad908894add55 | Medium | Score 53/100 | First seen |
| MD5 | 500e0bc0d7579fb338912770964076fe | Medium | Score 53/100 | First seen |
| MD5 | 10780939962b54addc9d31f57d80edfc | Medium | Score 53/100 | First seen |
| MD5 | bb88940e915b11f6330b7446f6037f5b | Medium | Score 53/100 | First seen |
| MD5 | f648bdd3c2cd902e239149de86d43e8f | Medium | Score 53/100 | First seen |
| MD5 | ce5932b88f879f26006df81f2fa7667e | Medium | Score 53/100 | First seen |
| MD5 | a2015665a3e18bf0ef86e3931245c7e6 | Medium | Score 53/100 | First seen |
| MD5 | 8db2f20b719dcb7029d6296505622093 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…