Dalbit Threat Actor Launches Attack Campaign Against Multiple Korean Organizations

Threat Level

Actor Report

For a detailed threat advisory, download the pdf file here

Summary

Dalbit is a threat actor group that has been active since at least 2022. They have been targeting South Korean companies, with more than 50 confirmed attack attempts so far. The group relies on open-source tools and has lacked any distinct characteristics to profile them.