VERY IMPORTANT

A targeted attack presumed to be carried out by a North Korean-related group using PDF documents was confirmed. The attack group is presumed to be Kimsuky or Thallium, but there is a possibility that the attack group imitated it. Although the related content has already been reported in the media, this blog additionally discloses undisclosed IOC and vulnerability development environment analysis information .