Threats Tagged 'operation gitpower'
View all threats tagged with 'operation gitpower'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'operation gitpower'
Click on any threat for detailed analysis and mitigation recommendations
The Kimsuky threat group is conducting spear phishing campaigns targeting Ukrainian experts in diplomacy, security, and international policy. The campaign, named GitPower, uses fraudulent international conference invitations and collaboration requests to lure victims. Attackers distribute malware and exfiltrate data via legitimate platforms such as GitHub, employing malicious LNK files and fake Zoom installers. This operation is linked to previous CHM-based attack methods and appears to be state-sponsored cyber espionage focused on monitoring South Korea-Ukraine cooperation developments. Organizations are advised to enhance endpoint detection and response (EDR) capabilities and conduct threat hunting for suspicious LNK execution, PowerShell abuse, and unauthorized GitHub activity. Join the discussion | AlienVault OTX General | 10/13/2026, 13:53:55 UTC Added: 10/13/2026, 14:03:42 UTC |
Showing 1 to 1 of 1 result