Genians

Kimsuky Spear Phishing Targets Ukrainian Diplomacy and Security Experts in Operation GitPower

• Cybercriminals

Kimsuky Spear Phishing Targets Ukrainian Diplomacy and Security Experts in Operation GitPower

Do Son October 13, 2026 0

Kimsuky spear phishing lures target Ukrainian security experts with fake invitations, as Operation GitPower abuses GitHub and GitLab.

RokRAT Malware Hides in Fake PDF Files to Spy on Academics

• Malware

RokRAT Malware Hides in Fake PDF Files to Spy on Academics

Do Son July 17, 2026 0

Genians exposed Operation Capsule Vault, an APT37 campaign. The RokRAT malware hides inside a fake PDF to spy on academics and researchers.

APT37’s New “Python-in-a-Cat” Malware Uses Environment Variable Obfuscation

• Malware

APT37’s New “Python-in-a-Cat” Malware Uses Environment Variable Obfuscation

Do Son May 12, 2026 0

Genians unmasks an APT37 campaign using environment variable tricks and compiled Python malware to bypass EDR. Protect your network from these stealthy lures.

Operation Poseidon: Konni APT Hijacks Google & Naver Ads for Malware

• Cyber Security
• Malware

Operation Poseidon: Konni APT Hijacks Google & Naver Ads for Malware

Do Son January 20, 2026 0

Genians reveals "Operation Poseidon": Konni APT exploits Google & Naver ad redirects to bypass defenses and deploy EndRAT.

Kimsuky APT Is Using Social Engineering and AppleSeed Malware to Spy on South Korea

• Cyber Security

Kimsuky APT Is Using Social Engineering and AppleSeed Malware to Spy on South Korea

Do Son September 5, 2025 0

A new report reveals that the North Korean Kimsuky APT is using social engineering on Facebook and Telegram to deliver AppleSeed malware to targets in South Korea.

APT37 Escalates Cyber-Espionage on South Korea: New RoKRAT Backdoor Uses Stealthy LNK Files & Steganography

• Malware

APT37 Escalates Cyber-Espionage on South Korea: New RoKRAT Backdoor Uses Stealthy LNK Files & Steganography

Do Son August 4, 2025 0

APT37, a North Korea-linked group, is using a new RoKRAT backdoor to target South Korea. The malware uses stealthy LNK files and steganography to evade detection.

Kimsuky’s AppleSeed Returns: North Korea-Linked APT Targets Korean Users via Social Media

• Cyber Security

Kimsuky’s AppleSeed Returns: North Korea-Linked APT Targets Korean Users via Social Media

Do Son June 10, 2025 0

Kimsuky's AppleSeed campaign targets Korean Facebook, email, and Telegram users with evolved social engineering and stealthy malware.