TI Mindmap HUB
Threat Intelligence Report

Attack Cases in Korea Involving the Installation of Radmin and UltraVNCv

📅 September 18, 2026 📰 asec.ahnlab.com 🔍 0 CVE(s) referenced

Threat actors—likely Chinese-speaking—are targeting Korean systems by covertly installing remote control tools like Radmin and UltraVNC, then leveraging these compromised machines as proxies and VPN servers for further malicious activity.

unclassified

Sign in to access the full report including:
detailed analysis, IOCs, MITRE ATT&CK mapping, and STIX bundle.

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap
🎯 IOC Extraction
⚔️ MITRE ATT&CK TTPs
📦 STIX 2.1 Bundle