Kimsuky HelloDoor / PebbleDash C2 evolution
campaign · campaign:kimsuky-pebbledash-hellodoor-trycloudflare-tunnel-c2-evolution
Kimsuky toolkit evolution documented by Kaspersky GReAT (May 2026) and follow-on reporting: the Rust-based HelloDoor variant of PebbleDash, the HTTPSpy RAT, and TryCloudflare quick-tunnel / VS Code remote-tunnel C2; South Korea primary, Germany spillover.
Coverage
0
first 2026-05-17 → last –
no data
Latest activity
–
no entry about it yet
Peak priority
·
no entry about it yet
Targets
·
no sector or region stated
Sources cited
0
0 hosts
Relationships explore in graph
Typed, source-stated connections from the entity registry; each edge cites the entry whose reporting establishes it.
attributed to
Story timeline
No published entries reference this entity yet.
Entries about Kimsuky HelloDoor / PebbleDash C2 evolution
No published entry is about this entity yet · an entry attaches by registry key, by the entity's name or a public alias in its title or body, or (for CVE entities) by exact CVE id.