VERY IMPORTANT

This report describes a recent information stealing operation by the threat actor group Kimsuky, also known as APT-Q-2. The attackers distributed malware impersonating software installers from South Korean companies, which collected sensitive information from compromised devices and exfiltrated it to attacker-controlled servers.