Kimsuky__2021__D2T1_-_The_Phishermen_-_Dissecting_Phishing_Techniques_of_CloudDragon_APT_-_Linda_Kuo_Zih-Cing_Liao.pdf

**Executive summary:** This presentation analyzes CloudDragon (Kimsuky-related) phishing campaigns and toolsets, detailing delivery methods (PHPMailer, SendGrid, proxy mirrors, phishing bots), phishing techniques including 2FA interception, and malware families (BabyShark, JamBog) used for credential theft, screen/keyboard monitoring, persistence and remote command-and-control.