Dalbit Threat Actor Launches Attack Campaign Against Multiple Korean Organizations

Dalbit is a threat actor group that has been active since at least 2022. They have been targeting South Korean companies, with more than 50 confirmed attack attempts so far. The group relies on open-source tools and has lacked any distinct characteristics to profile them.