Attributed metadata history
Up to 100 retained publisher events per page for bdec5c32616391ffc94530b3805bbabc8092c233b1e6a379f705e2f5211614b0. Withdrawals and unavailable references remain attributed to their publishers.
intelligence_src_58179cc3a307a2fc7f
observed · 2026-10-12 10:07:03 UTC
available
Fingerprint: b5d623a44d3bce70ba29bfc41cdde29c16769d85fd628e6e5adeaf73ec3b73c8
intelligence_src_58179cc3a307a2fc7f
observed · 2026-10-12 10:07:03 UTC
The threat actor used SEO poisoning (a technique that exploits search results to redirect users to fake sites) to distribute a malicious installer disguised as a KakaoTalk installer. The appearance and packaging method of the installer changed continuously, and the threat actor sequentially used NSIS, Advanced Installer, and Inno Setup. It contained both legitimate installation […]
Fingerprint: f0d80614552ec74c46ccdf1afc09b51cba22438fb7b20f66e35c646fd58092a8