New Kimsuky campaign compromised South Korean software vendors

A new campaign by North Korean threat actor Kimsuky (APT43) targeted South Korean software vendors in 2025 and 2026, ultimately compromising their customers. The group leveraged social engineering and exploiting remote code execution vulnerabilities to steal data and manipulate login pages, demonstrating a sophisticate…