DPRK Attack Campaign: Abusing LNK Files and GitHub C2 Targeting South Korea

1. Executive Summary In early April 2026, FortiGuard Labs disclosed an attack campaign linked to the Democratic People's Republic of Korea (DPRK), primarily targeting organizations in South Korea. Thi