Microsoft Word - ATIP_2023_Feb_Threat Trend Report on Kimsuky Group_20230329.docx

**Executive summary:** The AhnLab February 2023 Threat Trend Report analyzes Kimsuky APT operations, documenting new malware variants and delivery techniques — including FlowerPower scripts that exfiltrate browser data via the GitHub API, a DLL form of xRAT, and a .NET TutRAT — and provides IOCs (hashes, domains, IPs, file paths), observed spearphishing lures, and recommended detections.