---
title: "Discussion on \"DPRK Attack Campaign: Abusing LNK Files and GitHub C2 Targeting South Korea\" | Hashnode"
description: "Discussion on \"DPRK Attack Campaign: Abusing LNK Files and GitHub C2 Targeting South Korea\". 1. Executive Summary\nIn early April 2026, FortiGuard Labs disclosed an attack campaign linked to the Democratic People's Republic of Korea (DPRK), primarily targeting organizations in South Korea. Thi"
url: "https://hashnode.com/posts/dprk-attack-campaign-abusing-lnk-files-and-github-c2-targeting-south-korea/69d9a577c8e5007ddb28c925"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [DPRK Attack Campaign: Abusing LNK Files and GitHub C2 Targeting South Korea](https://blog.fiscybersec.com/dprk-attack-campaign-abusing-lnk-files-and-github-c2-targeting-south-korea?utm_source=hashnode&utm_medium=feed)

1\. Executive Summary In early April 2026, FortiGuard Labs disclosed an attack campaign linked to the Democratic People's Republic of Korea (DPRK), primarily targeting organizations in South Korea. Thi

Apr 11 · 19 min read · blog.fiscybersec.com  
Read the article

-   [#kimsuky](https://hashnode.com/tag/kimsuky)
-   [#apt37](https://hashnode.com/tag/apt37)
-   [#lazarus-group](https://hashnode.com/tag/lazarus-group)
-   [#lnk](https://hashnode.com/tag/lnk)
-   [#github-c2](https://hashnode.com/tag/github-c2)
-   [#lolbin](https://hashnode.com/tag/lolbin)
-   [#rat](https://hashnode.com/tag/rat)
-   [#malware](https://hashnode.com/tag/malware)
-   [#threat-intelligence](https://hashnode.com/tag/threat-intelligence)

## Written by

[Vũ Nhật Lâm](https://hashnode.com/@kami61)

@kami61

  
[View profile](https://hashnode.com/@kami61)

## Responses

Markdown supported · ⌘↵ to post

No responses yet.