This summer is predicted to be another scorcher, with record breaking temperatures across the U.S. beginning in June. While traditional summer crops do require heat, which is why we wait for summer to grow them, extreme heat waves or heat domes are a different thing altogether. Plants have a series of behaviors they'll display when under heat pressure. They can wilt, which is what it sounds like, due to water stress. Leaves will droop, and the solution isn't necessarily more water, but letting the plant ride out the wave with some shade, if you can provide it. Plants may bolt, which is when they stop growing leaves or fruit and instead, thinking they are at the end of their life, send up a flower, which will quickly go to seed. Once this flower is present, which the plant focuses all its energy on, the fruit and leaves will become bitter. Unfortunately, there's nothing you can do to "solve" bolting, except pull the plant and start over. And heat isn't the only threat: Fruit and leaves can also experience sun scald, which is basically a sunburn. You can see these spots on your tomatoes and pumpkins, which appear white, rather than red like they would on human skin. In most cases, plants will survive sunburn, but it puts the plant under additional stress and makes it more susceptible to other garden threats like disease. The best solution is to choose plants that will tolerate heat spikes, and then provide some support to your plants by watering evenly, giving shade when you can in the afternoon sun, and not planting, transplanting, or fertilizing during these spikes, all of which are stressful for plants. Greens that will survive a heat spikeWhile there are bolt-resistant lettuces you can grow, a true heat dome is simply too much stress, and most lettuce will go to seed. For heat-resistant greens, consider kale, which is hardy in both extreme cold and heat. Collards, known for the greens they produce, are also going to survive a heat wave without wilting, which is why they're popular across the south. The crop you might not have heard of yet is malabar spinach. While traditional spinach is a spring and shoulder season crop and won't do well even in an average summer, malabar (which is not actually related to real spinach) is a vining plant from India that tastes remarkably similar and has become popular for its resilience. Okra and corn are at home in the heatConsidering crops that have been popular in geographies that experience more heat than we're used to is a good strategy for finding vegetables that'll survive extreme temperatures. Okra is from Ethiopia, so heat resistance is part of the plant's DNA. Okra sometimes gets a bad rap for becoming slimy in recipes, but I urge you to consider growing it. There are two varieties of okra: I recommend only planting the spineless variety. The "spines" are spikes that can make touching and harvesting okra painful. Credit: Amanda Blum Corn may be a resource hog in your garden, requiring a lot of additional nitrogen to be productive, but it is also highly tolerant. Corn can survive in over 110 degree temperatures and still produce crops reliably, so long as those temperature spikes aren't extended. A true summer crop, corn needs 70 degree weather to grow, which is why you wait until June to plant corn seed. Vining plants like luffa, tepary beans, and yardlong beans To be fair, most people don't eat luffa (though you can); they know it instead as loofah, a sponge-like material used in "natural" scrubbing. But truly, luffa is a form of vining squash, which will grow prolifically, adores the sun, and thrives in prolonged heat. When the fruit is allowed to dry on the vine, the flesh can be stripped off, leaving behind the luffa, which looks precisely like loofah you purchase, and can be used immediately. There are plenty of pole beans (beans that climb, as opposed to bush beans, which do not) that originated in hot climates and will do well in a heat wave. Tepary beans, for instance: These beans are native to the Southwest U.S. and Mexico, and will spend the summer climbing and producing pods. Harvest them in the fall before the rain starts, and store them as dry beans. Yardlong beans are closer to a green bean. Still a vining bean, they can produce beans that are well over a foot long, as their name suggests. These summer stars prefer less water, and they will thrive anywhere they have support, like a trellis. Soybeans need the heatWhile not a vining bean, but a bush bean, soybeans are an easy crop to grow if you've got enough heat. These sun-tolerant plants will produce a limited amount of pods per plant, so they need to be grown in groups, but they require almost no support except watering. Harvest the pods and eat the beans steamed fresh, as you would in your favorite Japanese restaurant, or dry them to make soy milk or tofu. Squash and melons love the heatThere are two kinds of squash: summer and winter. Summer squash includes crops like zucchini, yellow squash, and pumpkins. Winter squash includes crops like acorn squash, butternut, spaghetti, and others. Both kinds of squash are traditionally grown in summer, and both are surprisingly resilient in heat. While you might experience sunburn on some fruit, squash is famous for providing shade due to the large leaves, and they will not only take care of most fruit, shielding it, but will also protect nearby plants by shading them, as well. So long as you keep your melons apart from your cucumbers and squash so they don't cross pollinate, your vining melons are likely to survive a heat wave with the same caveats as squash: Look for fruit that is exposed and cover it from sunburn, but the plant will mostly take care of that on its own. Sweet potatoes are built for high tempsOriginally from Polynesia, sweet potatoes are an excellent crop for beginning gardeners. They're easy to cultivate seedlings (called slips) from any sweet potato you bring home from the store. Once planted, they produce prolific above-ground vines that are showy with flowers, while below ground the potatoes grow over 120 days. These plants not only tolerate but thrive in heat.

If you've ever wondered where loofahs come from, take a trip with us.   Image: Penpak Ngamsathain / Getty Images Get the Popular Science daily newsletter💡 Breakthroughs, discoveries, and DIY tips sent every weekday. If you’ve spent most of your life under the impression that loofahs are some type of sea sponge and that these scratchy natural scrubbers are the last thing you’d want to use on your body on a daily basis, you’re not alone. But in fact, the Luffa Aegyptiaca (often known as loofah in the U.S.) is the taxonomic name of a species of gourd that grows on land, and it’s a genetic descendant of the wild cucumber. What’s more, if it’s locally grown with minimal processing, it’s plenty soft enough for not just your skin, but plenty of other applications, too. What is a luffa? In the States, you’d be excused for not being familiar with this unique plant, as luffa is far more popular in Asia and tropical regions. In fact, very few farmers grow the plant commercially for the American market—there are just two farms in the country and, according to Brooklynn Gamble, farm supervisor at The Luffa Farm in Nipomo, California, both are located in the West Coast state. But the plant isn’t endemic to countries this far north, so cultivating it requires lots of care and attention. Luffa plants growing on vines at The Luffa Farm. Image: Courtesy of The Luffa Farm Fortunately, luffa farmer Deanne Coon was willing to offer both, which is how The Luffa Farm was born in 2000 after growing the plant as part of a friend’s biology class experiment and then spending nearly two decades experimenting. Thanks to Nipomo’s location in a decidedly non-tropical climate, Coon had to account for things like cooler seasons (she grows in greenhouses), coastal winds (also greenhouses) and gophers (she grows plants in pots instead of directly in the ground).  Now semi-retired, she and a team run the small farm peppered with avocado and citrus trees and decorated with quirky custom yard art. They also offer tours during open hours so visitors can learn a little something about luffa. Guests saunter through a steamy greenhouse where long green gourds that resemble zucchini hang from trellises in impressive quantities. They learn that while some Asian cultures raise smaller varieties that are green, tender, and edible when young, it’s not popular as a culinary ingredient in the U.S. And when they inquire about why crispy brown gourds are still hanging on the vine, they learn that luffa isn’t harvested until well after you think it’s dead. “When it’s completely brown and dry we cut it off the vine,” Gamble explains. Only then, and after it is peeled, will it finally be recognizable as the fibrous exfoliating sponge many know and love. In areas of Asia, the luffa fruit is used in culinary dishes. Image: Courtesy of The Luffa Farm It’s what’s on the inside that matters Getting to that point, however, takes time and unique biological functions that aren’t visible to the naked eye. It takes six to nine months after planting luffa seeds for them to be ready to harvest, Gamble explains (longer in winter, shorter in summer). It takes three to four months just for slim green baby gourds to start sprouting from reaching vines and the male flowers, which are necessary for pollination, to bloom.  Once that happens and pollination is complete, the squash are technically edible and ripe for picking. The inner fruit tends to be slimy like okra, so it’s a bit of an acquired taste. However, there are certainly recipes from around the world that incorporate this nutritional veggie. But The Luffa Farm isn’t in the business of unpopular produce, so the fruit is left on the vine where it can grow as large and heavy as the trellised vines can handle, Gamble continues. As that happens, the interior plant fibers act as the veins that feed water and nutrients to the seeds, the care of which is the plant’s number one directive. Those veins get thicker and denser to nourish the seeds as the gourd grows. When the gourd gets too big—about the size of an oversized zucchini—the vine, which can grow 30 to 40 feet in any direction, cuts off the water supply to the whole fruit in order to redistribute resources to other plants on the vine that are still growing. “As the vine sucks the water out and recycles it, [the gourd] dries up,” Gamble describes. When that happens, instead of rotting like most other produce, the luffa turns from deep green to yellow to brown and hard. When that happens, the gourd feels light as air because all the liquid and vegetable matter has dried up, leaving only a fibrous network of cellulose inside the now-hard, shell-like skin. That’s when it’s time to harvest. The skin is cracked open and the seeds, which can be replanted, are shaken out. Harvesters soak the whole gourd in water for five minutes, which rehydrates the thin layer of vegetable residue on the underside and then “the skin so it slides right off,” Gamble says. What’s left over is an airy, light, sponge-like spidery network of plant fibers that make an excellent natural multi-purpose sponge that’s pliable when dry and even softer when wet. That’s what makes it such an attractive option among skincare enthusiasts. Not all luffa are created equal If that doesn’t sound at all like the rigid, compressed luffa you see for sale at your local health food store, you’re not wrong. Most luffa are imported, and since they’re a plant, they must be treated beforehand to ensure they won’t transport bugs, disease, or other agricultural blights, Gamble explains.  “Those heat treatments in particular are what damage the fibers,” she states. It shrinks the otherwise light and loose cellulose structures and makes the luffa hard, compact, and less pliable. Compromising the structure also makes them more prone to bacterial growth, because they don’t dry out as easily or completely between uses. Luffas grown and sold at The Luffa Farm. Image: Courtesy of The Luffa Farm Luffa grown in the U.S., like the ones from The Luffa Farm, don’t have to be treated with anything since they’re not imported from overseas. They just get a quick rinse before they’re sold. As a result, they’re softer, more pleasant on skin, more versatile, and longer lasting. One might last up to a year of regular use. Plus, because they’re highly porous, “they don’t create the same breeding ground for bacteria,” Gamble offers. A plant with unlimited uses But exfoliating isn’t all these plants are good for. On the contrary, Gamble says there are many uses for luffa. Softer varieties can be used as a facial sponge in place of a washcloth. They can even be tossed in the washer for a deep clean, though you should avoid putting them in the dryer. They make excellent dish sponges and pot scrubbers. Gamble uses one on her stainless steel stove.  A wet luffa makes quick work of washing your car, too, especially when it comes to scrubbing bugs off your grill, Gamble recommends. The fibers won’t even scratch the finish. They’ve even been used as insulation in mud brick houses and as industrial filters and may have inspired a sunlight-powered porous hydrogel that could potentially purify water. The best part: untreated luffa sponges are compostable, making them an eco-friendly alternative to synthetic sponges. “They are so unique as a plant,” Gamble says, a truly multifunctional and sustainable natural product whose uses go far beyond bath time exfoliation. And yes, it’s one that grows on land, not underwater.

Love crossword puzzles but don’t have all day to sit and solve a full-sized puzzle in your daily newspaper? That’s what The Mini is for! A bite-sized version of the New York Times’ well-known crossword puzzle, The Mini is a quick and easy way to test your crossword skills daily in a lot less time (the average puzzle takes most players just over a minute to solve). While The Mini is smaller and simpler than a normal crossword, it isn’t always easy. Tripping up on one clue can be the difference between a personal best completion time and an embarrassing solve attempt. Recommended Videos Just like our Wordle hints and Connections hints, we’re here to help with The Mini today if you’re stuck and need a little help. Below are the answers for the NYT Mini crossword today. NYT Mini Crossword answers today New York Times Across Chooses to receive marketing emails, with “in” – OPTS Buck ___, first Black coach in Major League Baseball (1962) – ONEIL Like your epidermis? – SKINNY Like the element Fe? – IRONY Quite a lot of – MANY Down Bulb in the kitchen – ONION Like an ink-filled writing tool? – PENNY Microscopic – TINY Acting deviously – SLY Green gumbo ingredient – OKRA ___ card (smartphone chip) – SIM

Joya Nandurdikar has plenty in her home country to inspire her, especially the objects and forgotten techniques that are centuries old. She believes that design is not only a form of expression, but also a tool for cultural preservation that she utilizes in her own practice. “There’s a vast and diverse landscape of materials, skills, and stories across India, and the possibilities feel endless,” Nandurdikar says. “Reimagining these crafts in a contemporary setting isn’t just creatively fulfilling, it’s a way to reintroduce and reinterpret them for a wider audience.” In 2001, Nandurdikar and Amrita Guha founded New Delhi-based firm Untitled Design, with an emphasis on responsible luxury. With a tailored approach for each project, Nandurdikar encourages a dynamic exchange between her team and artisans to create interiors that blend elements of traditional and modern. Joya Nandurdikar The partners decided to bring the same ethos to the product realm, and so they launched Furgonomics in 2022, a line of furnishings. The duo works with artists to offer bespoke pieces made of marble, wood, and stone inlays. Collaboration is at the heart of Nandurdikar’s creative process, and she finds magic in the scribbles made or laughter shared over a cup of tea. It is in these moments of collective energy that some of Nandurdikar’s most unexpected – and meaningful – ideas come to life. Yet the designer also appreciates the stillness of her personal space, where she can ground and embrace what she calls “quiet joy.” Someday Nandurdikar would like to explore curation. She is especially interested in the dialogue between histories and contemporary issues. “It’s a field that excites me for its potential to expose me to a rich tapestry of thoughts and imaginative minds,” she notes. “The idea of shaping narratives through art, and sparking emotion or reflection in a viewer, feels incredibly powerful to me.” Today, Joya Nandurdikar joins us for Friday Five! 1. Art Installation There’s something deeply compelling about how the traditional narratives and motifs are reimagined through a contemporary sculptural language. This installation is a perfect blend of modern sculpture and Mural art, a painted craft form from Kerala. The materiality is a combination of patinated brass with painted figures. 2. Goddess The idol of a goddess I deeply admire, and that profoundly reflects who I am and what I am capable of. Bestowed with the name of a goddess, I walk in her essence. Her power stirs my soul and is the force behind all I create. She rises, gilded in fire and gold. She is both the prayer and the war cry, the celebration and the conquest. 3. On the Water I wish all my evenings could be like the one spent on a boat, gently sailing through the sacred waters of the Ganga. The soft ripple of the river beneath me and the golden hues of dusk reflecting off its surface feed my soul and calm my mind in ways few things can. 4. 19th-Century Cabinet I fell in love with this fabulous piece of furniture during my visit to the Rijksmuseum. An exquisite creation dating back to 1867 was impeccably designed and crafted for Charles Guillaume Diehl. Its intricate detailing, refined proportions, and sheer elegance capture the essence of 19th-century craftsmanship with timeless allure. 5. Pipe Organ During my visit to a chapel in Milan, I discovered a majestic pipe organ that instantly stirred a sense of nostalgia, reminding me of the harmonium I once learned to play and the piano my daughter now plays. The organ, with its towering presence and resonant depth, has been widely used in classical music from the Renaissance to today.   Works by Joya Nandurdikar and Untitled Design: Photo: Avesh Gaur Anugraha The flooring of Anugraha, a residential project in South Delhi, is adorned by diligent terrazzo detail with a composition of stone and brass, in cast in-situ. Exquisite craftsmanship is celebrated in this detail, where each meticulously placed fragment forms a harmonious blend of textures, colors and materials, creating a bold statement that defines spatial narratives. Photo: Untitled Design Katha Tarana The main 40-foot wall in the lounge of the residence Katha Tarana is enlivened by a wooden marquetry mural from Mysore featuring the storyline of Ashwakatha as an auspicious symbol, fitted in traditional regalia and resembling a jigsaw puzzle. The coffee table by Furgonomics, named Elemental Alchemy, a work of art, is also featured at the centre of the space, celebrating the chiseled curve of the edges, incorporating sandblasted wooden pieces combined with jade, ceramic, & Indian sandblasted sandstone. The two pieces of art resemble jigsaw puzzles, joined together with an artful interplay of elements. Photo: Nivedita Gupta Abha At the heart of the entrance lobby of Abha is a mesmerizing water feature, designed to embody generosity and spiritual abundance. Monumental stone slabs form its foundation, elegantly adorned with brass and silver Khadau, blessed by Guruji. Each element is intricately inscribed with sacred Pali script, its words flowing with timeless wisdom. Photo: Ashish Sahi Urban Hearth The frame is set as a paradox, featuring an origami light installation by Ankon Mitra and a Chilly sculpture by Subodh Kerkar. These two installations create a striking contrast in both color and emotion – one exuding a spicy allure, the other as light as a feather. The installation features Gond art by the nationally acclaimed and award-winning artist Venkat Shyam, presented as part of the Craft Clusters initiative by Furgonomics – a program dedicated to contemporising traditional crafts. Each piece contributes to the ambience with depth and intrigue, inviting exploration and contemplation. Photo: Nivedita Gupta Pravaah Despite the limited natural light, Kashmiri pinjrakari latticework transforms the basement dining room of Pravaah, a residential project in New Delhi, into a jewel-box ambience. The intricate woodwork filters the limited light, casting a warm glow throughout the room. Adorning the dining room is the Kriya Console by Furgonomics, crafted with a striking combination of Dokra technique and monolith materials, representing the delicate process of development and transformation. The tactile quality of the ledge, reminiscent of a wisp of smoke or a gentle breeze, evokes a sense of ethereality, serving as a functional element but also as a sculptural statement.

Everything is more expensive this year, and that likely includes utilities like your water bill. While growing vegetables in your yard can be enchanting and empowering, it isn’t very efficient (compared to farms) in terms of water usage. There are a number of ways to become more efficient and sustainable, including using drip irrigation, but another way is to only plant vegetables that don't need too much water to begin with. Watering at the root is keyBefore I get to the specific vegetables, it's important to go over a few general watering tips.Remember that vegetables get hydration through their roots, which live underground. Watering from above, like a hose or sprinkler, has problems: you’re getting the plants wet more than the roots, which creates conditions for disease spread; you’re watering less precisely, therefore wasting water; and the impact of the water against the dirt causes droplets to bounce back up with whatever fungus or viruses are in the dirt, also spreading disease. Watering gently and consistently at ground level with drip irrigation is the best option for both the plant and your wallet. To ensure you’re watering efficiently, group plants with similar watering needs together in your garden, so you can set the drip appropriately to water less. But even more important is remembering that roots grow over time. A new seedling has shallow roots, whereas an end-of-season plant has deeply established roots. More roots means that the plant can absorb more water from deeper underground. Less roots means less hydration from the soil, so more water is needed at a shallower depth. (Though some vegetables, like corn and lettuce, will always be shallow rooted, and thus aren’t good candidates for less water.)Hothouse plantsAccording to Oregon State University, a tomato plant's need for watering is negated by the deep roots the plants establish over the season. As above, you want to water sufficiently early in the season as roots are established while taking care not to over water, which will result in those roots staying close to the surface. If the plant needs water, those roots will grow deeper in search of moisture. Reducing water greatly, if not cutting it off entirely mid-season, shouldn’t harm your harvest. The lack of surface water will reduce disease spread, and tomatoes will ripen if you reduce their watering. It’s not only tomatoes, either: Squash, which includes zucchini, summer and winter squash, as well as melons, eggplants, and hot peppers all behave the same in terms of water needs and roots. Beans Credit: Amanda Blum Most beans, particularly pole beans, have adapted to drought conditions over time. As such, they can survive and produce flowers and fruit with minimal moisture. Beans require water to germinate, so if you direct sow, ensure the seeds have consistent moisture levels. Once germinated, you can reduce (but not eliminate) water. Since beans have such a short season (usually 60 days or less), they require less water simply by existing for less time. Less moisture is going to reduce common bean problems like powdery mildew, a quickly spreading surface fungus.Chard and okra Credit: Amanda Blum For some heat hardier vegetables like chard and okra, they still require water, but do better with weekly or every-other-weekly deep watering, as opposed to daily drip. Okra is native to drier climates and prefers less water. The deep roots of the plant allow it to draw enough water from the soil to sustain itself. Chard and kale can use their huge leaves to shade the ground, which is an effective form of moisture retention. Occasional deep waterings will be enough for the plant to continue growing.Blueberries prefer less moistureI know, blueberries are a fruit and not a vegetable, but I felt compelled to include the advice here anyway. Consider it a bonus tip. A few years ago, Micah Geiselman, a blueberry farmer from Morning Shade Farm in Canby came to inspect my many bushes, and he had surprising advice: “People over-water their blueberries,” he explained to me. They appreciate good drainage and do better with less water. I’ve since changed the elevation of my blueberries to ensure better drainage and moved watering lines further away—the results were astounding. I experienced better yields, but the berries themselves were plumper and better tasting. This isn’t conclusive, of course, since there are too many variables to account for, but I take the advice of a blueberry expert seriously. 

May 13, 2025Ravie LakshmananCyber Espionage / Malware The North Korea-linked threat actor known as Konni APT has been attributed to a phishing campaign targeting government entities in Ukraine, indicating the threat actor's targeting beyond Russia. Enterprise security firm Proofpoint said the end goal of the campaign is to collect intelligence on the "trajectory of the Russian invasion." "The group's interest in Ukraine follows historical targeting of government entities in Russia for strategic intelligence gathering purposes," security researchers Greg Lesnewich, Saher Naumaan, and Mark Kelly said in a report shared with The Hacker News. Konni APT, also known as Opal Sleet, Osmium, TA406, and Vedalia, is a cyber espionage group that has a history of targeting entities in South Korea, the United States, and Russia. It's operational since at least 2014. Attack chains mounted by the threat actor often involve the use of phishing emails to distribute malware called Konni RAT (aka UpDog) and redirect recipients to credential harvesting pages. Proofpoint, in an analysis of the threat group published in November 2021, assessed TA406 to be one of several actors that make up the activity publicly tracked as Kimsuky, Thallium, and Konni Group. The latest set of attacks documented by the cybersecurity company entails the use of phishing emails that impersonate a fictitious senior fellow at a think tank called the Royal Institute of Strategic Studies, which is also a non-existent organization. The email messages contain a link to a password-protected RAR archive that's hosted on the MEGA cloud service. Opening the RAR archive using a password mentioned in the message body launches an infection sequence that's engineered to conduct extensive reconnaissance of the compromised machines. Specifically, present within the RAR archive is a CHM file that displays decoy content related to former Ukrainian military leader Valeriy Zaluzhnyi. Should the victim click anywhere on the page, a PowerShell command embedded within the HTML is executed to reach out to an external server and download a next-stage PowerShell payload. The newly launched PowerShell script is capable of executing various commands to gather information about the system, encode it using Base64-encoding, and send it to the same server. "The actor sent multiple phishing emails on consecutive days when the target did not click the link, asking the target if they had received the prior emails and if they would download the files," the researchers said. Proofpoint said it also observed an HTML file being directly distributed as an attachment to the phishing messages. In this variation of the attack, the victim is instructed to click on an embedded link in the HTML file, resulting in the download of a ZIP archive that includes a benign PDF and a Windows shortcut (LNK) file. When the LNK is run, it executes Base64-encoded PowerShell to drop a Javascript Encoded file called "Themes.jse" using a Visual Basic Script. The JSE malware, in turn, contacts an attacker-controlled URL and runs the response from the server via PowerShell. The exact nature of the payload is currently not known. Furthermore, TA406 has been spotted attempting to harvest credentials by sending fake Microsoft security alert messages to Ukrainian government entities from ProtonMail accounts, warning them of suspicious sign-in activity from IP addresses located in the United States and urging them to verify the login by visiting a link. While the credential harvesting page has not been recovered, the same compromised domain is said to have been used in the past to collect Naver login information. "These credential harvesting campaigns took place prior to the attempted malware deployments and targeted some of the same users later targeted with the HTML delivery campaign," Proofpoint said. "TA406 is very likely gathering intelligence to help North Korean leadership determine the current risk to its forces already in the theatre, as well as the likelihood that Russia will request more troops or armaments." "Unlike Russian groups who have likely been tasked with gathering tactical battlefield information and targeting of Ukrainian forces in situ, TA406 has typically focused on more strategic, political intelligence collection efforts." The disclosure comes as the Konni group has been linked to a sophisticated multi-stage malware campaign targeting entities in South Korea with ZIP archives containing LNK files, which run PowerShell scripts to extract a CAB archive and ultimately deliver batch script malware capable of collecting sensitive data and exfiltrating it to a remote server. The findings also dovetail with spear-phishing campaigns orchestrated by Kimsuky to target government agencies in South Korea by delivering a stealer malware capable of establishing command-and-control (C2 or C&C) communications and exfiltrating files, web browser data, and cryptocurrency wallet information. According to South Korean cybersecurity company AhnLab, Kimsuky has also been observed propagating PEBBLEDASH as part of a multi-stage infection sequence initiated via spear-phishing. The trojan was attributed by the U.S. government to the Lazarus Group in May 2020. "While the Kimsuky group uses various types of malware, in the case of PEBBLEDASH, they execute malware based on an LNK file by spear-phishing in the initial access stage to launch their attacks," it said. "They then utilize a PowerShell script to create a task scheduler and register it for automatic execution. Through communication with a Dropbox and TCP socket-based C&C server, the group installs multiple malware and tools including PEBBLEDASH." Konni and Kimsuky are far from the only North Korean threat actors to focus on Seoul. As recently as March 2025, South Korean entities have been found to be at the receiving end of another campaign carried out by APT37, which is also referred to as ScarCruft. Dubbed Operation ToyBox Story, the spear-phishing attacks singled out several activists focused on North Korea, per the Genians Security Center (GSC). The first observed spear phishing attack occurred on March 8, 2025. "The email contained a Dropbox link leading to a compressed archive that included a malicious shortcut (LNK) file," the South Korean company said. "When extracted and executed, the LNK file activated additional malware containing the keyword 'toy.'" The LNK files are configured to launch a decoy HWP file and run PowerShell commands, leading to the execution of files named toy03.bat, toy02.bat, and toy01.bat (in that order), the last of which contains shellcode to launch RoKRAT, a staple malware associated with APT37. RokRAT is equipped to collect system information, capture screenshots, and use three different cloud services, including pCloud, Yandex, and Dropbox for C2. "The threat actors exploited legitimate cloud services as C2 infrastructure and continued to modify shortcut (LNK) files while focusing on fileless attack techniques to evade detection by antivirus software installed on target endpoints," Genians said. Found this article interesting? Follow us on Twitter  and LinkedIn to read more exclusive content we post. SHARE    