Kimsuky hackers target Ukrainian experts for intelligence on Russia's war

North Korea's Kimsuky group targeted Ukrainian diplomacy and security experts using fake conference invitations and malicious documents, according to South Korean firm Genians. The campaign, part of Operation GitPower, sought intelligence on the war, North Korean troop losses and South Korea-Ukraine talks; most attacks failed.

• Kimsuky posed as organizers of a Seoul cybersecurity conference to lure a Ukrainian expert
• Attacks used GitHub, GitLab and Codeberg under the Operation GitPower campaign
• Researchers also found Japanese-language documents suggesting planned attacks on Japanese targets
• Most observed attacks were unsuccessful, Genians said