DEV Community

Security Cyber
Security Cyber

Posted on • Originally published at thehackernews.com

Kimsuky Deploys HTTPSpy, Expands Arsenal with HelloDoor and VS Code Tunnels: What Security Teams Need to Know

Kimsuky Deploys HTTPSpy, Expands Arsenal with HelloDoor and VS Code Tunnels

The North Korean state-sponsored threat actor known as Kimsuky (aka Velvet Chollima) has been attributed to a fresh set of cyber attacks targeting South Korean military and corporate entities through March and April 2026.

"Kimsuky employed a range of tailored social engineering tactics, such as spoofing security software installation pages and crafting a fake Webex meeting page that leveraged


Why this matters: This highlights ongoing challenges in cybersecurity.

Key takeaways:

  • Stay informed about emerging threats
  • Review and update security controls
  • Share knowledge with your team

Auto-generated by Security Cyber

Source: The Hacker News

Security Cyber - Student-Founded - SOC-Focused - Ethically Operated

Top comments (0)