Kimsuky-Linked Campaign Uses Malicious LNKs, GitHub PATs and AI-Generated Decoys
Genians analyzed 13 malicious LNKs linked to Kimsuky’s Operation GitPower, finding obfuscated PowerShell, GitHub PAT-based payload retrieval, hidden scheduled tasks, Pastebin fallback C2, anti-analysis checks, and decoys bearing opencode metadata.