Source profile

asec.ahnlab.com

Evidence-bounded context

A field appears only when the current profile revision carries supporting evidence. Missing context stays visibly unknown.

Source classes: Not yet evidenced
Ownership: Not yet evidenced
Funding ties: Not yet evidenced
Declared affiliations: Not yet evidenced
Geographic base: Not yet evidenced
Methodology: Not yet evidenced

Current clusters

security1 distinct publisher

Kimsuky adds Chrome Remote Desktop to a toolkit it never retires

ASEC says the North Korean group now installs Chrome Remote Desktop after AppleSeed lands, while its older VNC and RDP Wrapper activity keeps turning up in logs.

Publishers:asec.ahnlab.com

Reality

Evidence62
Adoption44

Evidence-bounded context

Current clusters

Kimsuky adds Chrome Remote Desktop to a toolkit it never retires

Kimsuky keeps picking RDP, which puts detection on configuration instead of files