TI Mindmap HUB
Threat Intelligence Report

Kimsuky Uses the AI Agent 'opencode' to Create Decoys as Its GitHub PAT-Based LNK Attacks Evolve

๐Ÿ“… September 7, 2026 ๐Ÿ“ฐ www.genians.co.kr ๐Ÿ” 0 CVE(s) referenced

Kimsuky has advanced its GitHub-based LNK attack chain by leveraging the AI agent 'opencode' to mass-produce decoy documents, diversify payload delivery via Pastebin, and implement sophisticated evasion tactics, signaling a rapid evolution in both operational speed and detection resistance.

unclassified

Sign in to access the full report including:
detailed analysis, IOCs, MITRE ATT&CK mapping, and STIX bundle.

๐Ÿ” Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

๐Ÿ“Š Visual Mindmap
๐ŸŽฏ IOC Extraction
โš”๏ธ MITRE ATT&CK TTPs
๐Ÿ“ฆ STIX 2.1 Bundle