The North Korean state-sponsored threat actor known asKimsukyhas been discovered using a new reconnaissance tool calledReconSharkas part of an ongoing global campaign. “[ReconShark] is actively delivered to specifically targeted individuals through spear-phishing emails, OneDrive links leading to document downloads, and the execution of malicious macros,” SentinelOne researchers Tom Hegel