Kimsuky NUKESPED zlrenu8.exe Screen Capture Activity Detected

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•1

Detects the execution of the NUKESPED backdoor (specifically the file named zlrenu8.exe), which is associated with Kimsuky's espionage operations, including screen capture activities.