Digital Warfare Podcast Daily Brief May 20, 2026

The Digital Warfare Podcast · May 20, 2026 · 4m · transcript

Summary

North Korean threat group Kimsuky is targeting recruiters and hiring professionals using malicious LNK files and multi-stage malware delivery chains involving PowerShell, JSE scripts, scheduled tasks, and Python backdoors. Researchers observed increasingly stealth-focused execution methods designed to evade detection through living-off-the-land techniques and layered persistence mechanisms.

Key Takeaways

• Kimsuky used malicious LNK files disguised as resumes and recruitment documents.

• The attack chain leveraged PowerShell, XML, JSE, BAT scripts, and scheduled tasks for stealth…