Chinese Hackers TAG-74 Targets South Korean Organizations in a Multi-Year Campaign

Social engineering attacks mounted by the adversary make use of Microsoft CHM file lures to drop a custom variant of an open-source Visual Basic Script backdoor called ReVBShell, which subsequently serves to deploy the Bisonal remote access trojan.