Hellodoor

Kimsuky turns Webex and Visual Studio Code tunnels into a South Korea trap

In this campaign, Kimsuky does not look like a noisy criminal operation; it looks like a carefully staged trust compromise built from a fake security page, a fake Webex meeting and channels legitimate enough to survive a first glance.