Tonto Team Uses Malware File to Launch Attacks on South Korean Institutions

The Tonto Team, a threat actor with ties to China, is targeting South Korean institutions such as education, construction, diplomatic, and political institutions with new attacks.

This attack sequence begins with a Microsoft Compiled HTML Help (.CHM) file that is used to side-load malicious DLL files and launch ReVBShell, an open source VBScript backdoor.

This is followed by the deployment of the Bisonal remote access trojan.

Similar attack chains have also been adopted by North Korean threat actors.

#shorts #techshorts #technews #tech #technology #new attacks #ASEC #Tonto Team

👋 Feeling the vibes?

Keep the good energy going by checking out my Amazon affiliate link for some cool finds! 🛍️

If not, consider contributing to my caffeine supply at Buy Me a Coffee ☕️.

Your clicks = cosmic support for more awesome content! 🚀🌈