North Korea Kimsuky Launch Phishing Attacks on UniversitiesInfosecurity Magazine·Aug 8, 13:00 UTC · Aug 8, 2024Threat actor60
The North Korean Kimsuky APT threatens South Korea evolving its TTPsSecurity Affairs·Mar 3, 18:48 UTC · Mar 3, 2020Threat actor157
Experts detail a new Kimsuky social engineering campaignSecurity Affairs·Jun 8, 18:04 UTC · Jun 8, 2023Threat actor57
Kimsuky’s GoldDragon cluster and its C2 operationsKaspersky Securelist·Aug 24, 16:39 UTC · Aug 24, 2022Threat actor145
North Korea-linked APT Kimsuky targeted German defense firm Diehl DefenceSecurity Affairs·Oct 1, 07:06 UTC · Oct 1, 2024Threat actor57
North Korean APT Group Kimsuky Expands Social Engineering TacticsInfosecurity Magazine·Jun 7, 17:00 UTC · Jun 7, 2023Threat actor57
North Korea–linked APT Kimsuky behind quishing attacks, FBI warnsSecurity Affairs·Jan 10, 15:34 UTC · Jan 10, 2026Threat actorCVE-2019-0708CVE-2017-1188260
North Korean hacking group Kimsuky targeting regional experts, news outletsThe Record·Jun 6, 19:49 UTC · Jun 6, 2023Threat actor45
Kimsuky APT poses as journalists and broadcast writers in attacksSecurity Affairs·Jun 3, 16:11 UTC · Jun 3, 2023Threat actor57
North Korea’s Kimsuky cyber-spies earn an alert from Washington, SeoulThe Record·Jun 2, 14:48 UTC · Jun 2, 2023Threat actor57
Kimsuky APT exploited BlueKeep RDP flaw in attacks against South Korea and JapanSecurity Affairs·Apr 21, 18:25 UTC · Apr 21, 2025Threat actorCVE-2019-0708CVE-2017-1188260
Kimsuky Group used custom RDP Wrapper versionSecurity Affairs·Feb 8, 18:15 UTC · Feb 8, 2025Threat actor57
US sanctions North Korean ‘Kimsuky’ hackers after surveillance satellite launchThe Record·Dec 1, 18:26 UTC · Dec 1, 2023Threat actor60
North Korea's Kimsuky Group Mimics Key Figures in Targeted Cyber AttacksThe Hacker News·Jun 3, 05:07 UTC · Jun 3, 2023Threat actor57
N. Korea-linked Kimsuky Shifts to Compiled HTML Help Files in Ongoing CyberattacksThe Hacker News·Apr 2, 04:40 UTC · Apr 2, 2024Threat actor57
N. Korean Kimsuky APT targets S. KoreaSecurity Affairs·Aug 20, 17:38 UTC · Aug 20, 2023Threat actor57
North Korea-linked Kimsuky APT uses new recon tool ReconSharkSecurity Affairs·May 22, 20:32 UTC · May 22, 2023Threat actor57
North Korean APT Kimsuky hacked South Korea’s KAERI agencySecurity Affairs·Jun 19, 16:41 UTC · Jun 19, 2021Threat actor57
Kimsuky Deploys HTTPSpy, Expands Arsenal with HelloDoor and VS Code TunnelsThe Hacker News·May 30, 06:13 UTC · May 30, 2026Threat actor157
North Korean APT Kimsuky Launches Global SpearInfosecurity Magazine·May 5, 17:00 UTC · May 5, 2023Threat actor57
North Korea-linked Kimsuky APT attack targets victims via MessengerSecurity Affairs·May 20, 06:23 UTC · May 20, 2024Threat actor57
U.S. Treasury Sanctions North Korean Kimsuky Hackers and 8 ForeignThe Hacker News·Dec 1, 09:02 UTC · Dec 1, 2023Threat actor45
New Kimsuky campaign compromised South Korean software vendorsThe Record·Jul 22, 16:54 UTC · Jul 22, 2026Threat actor57
North Korean Kimsuky Hackers Use Russian Email Addresses for Credential Theft AttacksThe Hacker News·Dec 3, 09:51 UTC · Dec 3, 2024Threat actor45
Kimsuky Using TRANSLATEXT Chrome Extension to Steal Sensitive DataThe Hacker News·Jun 28, 16:19 UTC · Jun 28, 2024Threat actorCVE-2017-1188260
Kimsuky Hackers Deploying AppleSeed, Meterpreter, and TinyNuke in Latest AttacksThe Hacker News·Dec 29, 10:16 UTC · Dec 29, 2023Threat actor57
Kimsuky Targets Think Tanks and News Media with Social Engineering AttacksThe Hacker News·Aug 23, 12:49 UTC · Aug 23, 2023Threat actor57
German and South Korean Agencies Warn of Kimsuky's Expanding Cyber Attack TacticsThe Hacker News·Mar 25, 05:40 UTC · Mar 25, 2023Threat actor57
GoldDragon campaign: Kimsuky APT adopts victim verification techniqueSecurity Affairs·Aug 26, 08:36 UTC · Aug 26, 2022Threat actor57
Kimsuky Group Adopts New Phishing Tactics to Target VictimsInfosecurity Magazine·Dec 3, 16:30 UTC · Dec 3, 2024Threat actor57
N. Korean Kimsuky Hackers Using New Recon Tool ReconShark in Latest CyberattacksThe Hacker News·May 8, 05:38 UTC · May 8, 2023Threat actor45
North Korean APT group ‘Kimsuky’ targeting experts with new spearphishing campaignThe Record·Mar 22, 23:57 UTC · Mar 22, 2023Threat actor57
Talos Takes Ep. #76: What is Kimsuky phishing around for?Cisco Talos·Nov 12, 16:37 UTC · Nov 12, 2021Threat actor57
The “Kimsuky” Operation: A North Korean APT?Kaspersky Securelist·Sep 11, 20:10 UTC · Sep 11, 2013Threat actor57
Kimsuky-linked hackers use similar tactics to attack Russia and South Korea, researchers sayThe Record·Sep 9, 16:24 UTC · Sep 9, 2024Threat actor45
North Korean Hackers Spoofing Journalist Emails to Spy on ExpertsInfosecurity Magazine·May 3, 14:30 UTC · May 3, 2024Threat actor45
North Korean Group Kimsuky Exploits DMARC and Web BeaconsInfosecurity Magazine·Apr 17, 16:30 UTC · Apr 17, 2024Threat actor57
U.S. government sanctions prolific North Korean cyber espionage unitCyberScoop·Dec 1, 19:55 UTC · Dec 1, 2023Threat actor in the wild60
Kimsuky APT: Operation’s possible North Korean links uncoveredKaspersky Securelist·Sep 11, 23:35 UTC · Sep 11, 2013Threat actor57
North Korean Hackers Found Behind a Range of Credential Theft CampaignsThe Hacker News·Nov 22, 07:12 UTC · Nov 22, 2021Threat actor57