L0Psec

@l0psec · Twitter · 2026-07-20 15:26 UTC

Another potential DPRK sample shared by @malwrhunterteam: 53b2d24c9aefe01a768f6e2c637ab9fd56dcede852925cec18eccae58dfecec7 - YZi Labs - Audit Confirmation Form - June 30 2026.docx.scpt (double extension). Currently 5 VT hits, compiled AppleScript. 🧵