Logpresso reports a Kimsuky-linked APT attack against prominent Korean law firms using a malicious Hangul document lure related to a defense industry digital innovation seminar. The document used password protection and OLE object execution to drop files into a temporary directory, then registered scheduled tasks that periodically downloaded and executed payload content from C2 infrastructure. The activity reflects DPRK espionage targeting legal-sector victims for reconnaissance and sensitive information collection.