HelloDoor

Kimsuky, a North Korean state-sponsored threat actor, has launched cyber attacks against South Korean military and corporate entities using HTTPSpy, HelloDoor, and VS Code Tunnels. The attacks involved social engineering tactics like spoofed security software pages and fake Webex meeting links.