Kimsuky’s New Golang Stealer ‘Troll’ and ‘GoBear’ Backdoor Target South Korea

The North Korea-linked nation-state actor known as Kimsuky is suspected of using a previously undocumented Golang-based information stealer called Troll Stealer.
The malware steals « SSH, FileZilla, C drive files/directories, browsers, system information, [and] screen captures » from infected systems, South Korean cybersecurity company S2W said in a new technical report.
Troll

The North Korea-linked nation-state actor known as Kimsuky is suspected of using a previously undocumented Golang-based information stealer called Troll Stealer.
The malware steals « SSH, FileZilla, C drive files/directories, browsers, system information, [and] screen captures » from infected systems, South Korean cybersecurity company S2W said in a new technical report.
Troll