AhnLab ASEC
ahnlab-asec · B · active
AhnLab Security Emergency-response Center, Korean CTI; particularly strong on DPRK Lazarus/Kimsuky and East-Asia targeted campaigns (added 2026-05-08). 2026-05-08 audit: WebFetch returned 5 dated reports Apr 13-22 2026. Candidate; promote to active after 3 runs. | 2026-06-20 full audit (v2.62): live=Y, drill=Y. FETCH → webfetch https://asec.ahnlab.com/en/ (listing) then webfetch the per-article https://asec.ahnlab.com/en/<id>/ URL for body; RSS alternative at https://asec.ahnlab.com/en/feed/. AVOID: Nothing to avoid; plain WebFetch works on both listing and article. No bridge needed.. | 2026-07-05 admiralty audit: B (HIGH->B), AhnLab vendor research lab, first-hand telemetry; keep active, plain WebFetch works on listing and articles. | 2026-10-07 (S3): per-post `extract` works; WebFetch gives dates and URLs. | 2026-10-25 (S3): `extract https://asec.ahnlab.com/en/` is served through the jina reader and returns a stale partial listing; `WebFetch https://asec.ahnlab.com/en/` with the title/date/href prompt returned ten dated items and is the better listing recipe; per-post `extract` is also served via the reader.
Cited in 3 entries
Citation cadence
Citation days per ISO week (5 weeks of coverage span, total 2).
- CVE-2019-18935, Progress Telerik UI for ASP.NET AJAX: a patched-since-2020 deserialization RCE still exploited, now via an in-memory Godzilla web shell registered on ASP.NET's VirtualPathProvider2026-09-28
- MoiClient: an invoice-themed backdoor chains an RPC-based UAC bypass with a vulnerable Lenovo PC Manager driver to kill security products and steal browser credentials2026-09-03
- Kimsuky's seafood-invoice LNK campaign abuses Backblaze B2 cloud storage as C2 and exfiltration infrastructure, keyed by victim BIOS serial number2026-09-03