The Kimsuky Group, known for its sophisticated cyberattacks, has been employing the powerful tool Meterpreter to target and compromise web servers. Meterpreter, a versatile post-exploitation framework, enables the group to gain unauthorized access and control over targeted systems, granting them the ability to extract sensitive data, plant malicious code, or carry out further nefarious activities.
AhnLab Security Emergency response Center (ASEC) has recently discovered the distribution of malware targeting web servers by Kimsuky group.
Source: Kimsuky Group Using Meterpreter to Attack Web Servers