Kimsuky Hacker Group Unleashes Updated Phishing Strategies and Malware Infections

Kimsuky (aka Black Banshee) is running a sophisticated phishing campaign that drops an obfuscated VBScript which launches a PowerShell stealer; the modular malware gathers browser credentials, crypto-wallet data, system inventory and logs (including keylogging and clipboard capture), uses anti-VM checks to evade analysis, and exfiltrates data in chunks to C2, with several IOCs (filenames and hashes) provided; behavioral endpoint protections are recommended.