Kimsuky Exploits Legitimate Certificate to Disseminate TrollAgent

Amber | Vulnerability Report

The Kimsuky group, backed by North Korea, used TrollAgent malware via a fake security program to target a Korean construction association’s website, stealing data and enabling remote control between December 2023 and January 2024.

Reduce real exposure. Not just vulnerability volume.