Kimsuky Uses Quasar RAT to Deploy Funhouse Ransomware Through Multi-Stage Scripts
What happened
The findings indicate continuity rather than an entirely new ransomware (software that locks up files and demands payment) operation. A Kimsuky campaign that delivers Funhouse ransomware through a malicious Hangul document disguised as a resume.
The operation combines embedded OLE objects, sequential scripts, a Python backdoor (a hidden way into a system that bypasses its login), and Quasar RAT, linking the September 2026 activity to earlier Endpoint ransomware deployments attributed to the group. [β¦] The post Kimsuky Uses Quasar RAT to Deploy Funhouse Ransomware Through Multi-Stage Scripts appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .
Sources & evidence
- GBHackers Reporting source
Kimsuky Uses Quasar RAT to Deploy Funhouse Ransomware Through Multi-Stage Scripts β
https://gbhackers.com/funhouse-ransomware-attack/