Larva-25010 is AhnLab ASEC's tracking designation, used in an October 2025 Korean-language report consolidating a series of ASEC threat notes issued after the August 2025 DEF CON 33 release of "APT Down: The North Korea Files," a Phrack Magazine report by researchers "saber" and "cyb0rg" describing a leaked data dump from a workstation the authors attributed to an operator of the Kimsuky group. Building on that leak, the compiled ASEC posts describe continuing compromise of South Korean administrative, military, and telecommunications organizations, a warning about an apparently shared government-agency password, indications the operator's Korean-language proficiency was weak, raising the possibility of a Chinese national behind the keyboard, reconnaissance against Taiwan and Japan, leakage of an APPM product with attempted decryption of its data, and preparations to phish Naver and Kakao login pages.