North Korean attackers use malicious blogs to deliver malware to highCisco Talos·Nov 10, 22:11 UTC · Nov 10, 2021Malware42
North Korea Kimsuky Launch Phishing Attacks on UniversitiesInfosecurity Magazine·Aug 8, 13:00 UTC · Aug 8, 2024Threat actor60
The North Korean Kimsuky APT threatens South Korea evolving its TTPsSecurity Affairs·Mar 3, 18:48 UTC · Mar 3, 2020Threat actor157
Experts detail a new Kimsuky social engineering campaignSecurity Affairs·Jun 8, 18:04 UTC · Jun 8, 2023Threat actor57
Kimsuky’s GoldDragon cluster and its C2 operationsKaspersky Securelist·Aug 24, 16:39 UTC · Aug 24, 2022Threat actor45
North Korea-linked APT Kimsuky targeted German defense firm Diehl DefenceSecurity Affairs·Oct 1, 07:06 UTC · Oct 1, 2024Threat actor57
North Korean APT Group Kimsuky Expands Social Engineering TacticsInfosecurity Magazine·Jun 7, 17:00 UTC · Jun 7, 2023Threat actor57
North Korea–linked APT Kimsuky behind quishing attacks, FBI warnsSecurity Affairs·Jan 10, 15:34 UTC · Jan 10, 2026Threat actorCVE-2019-0708CVE-2017-1188260
Kimsuky Spreads DocSwap Android Malware via QR Phishing Posing as Delivery AppThe Hacker News·Dec 19, 10:33 UTC · Dec 19, 2025MalwareCVE-2024-3819347
North Korean hacking group Kimsuky targeting regional experts, news outletsThe Record·Jun 6, 19:49 UTC · Jun 6, 2023Threat actor45
Kimsuky APT poses as journalists and broadcast writers in attacksSecurity Affairs·Jun 3, 16:11 UTC · Jun 3, 2023Threat actor57
North Korea’s Kimsuky cyber-spies earn an alert from Washington, SeoulThe Record·Jun 2, 14:48 UTC · Jun 2, 2023Threat actor57
Kimsuky APT exploited BlueKeep RDP flaw in attacks against South Korea and JapanSecurity Affairs·Apr 21, 18:25 UTC · Apr 21, 2025Threat actorCVE-2019-0708CVE-2017-1188260
Kimsuky Group used custom RDP Wrapper versionSecurity Affairs·Feb 8, 18:15 UTC · Feb 8, 2025Threat actor57
US sanctions North Korean ‘Kimsuky’ hackers after surveillance satellite launchThe Record·Dec 1, 18:26 UTC · Dec 1, 2023Threat actor60
North Korea's Kimsuky Group Mimics Key Figures in Targeted Cyber AttacksThe Hacker News·Jun 3, 05:07 UTC · Jun 3, 2023Threat actor57
More suspected North Korean malware identified after US alert on Kimsuky hackersCyberScoop·Nov 2, 12:59 UTC · Nov 2, 2020Malware in the wild60
Kimsuky's New Golang Stealer 'Troll' and 'GoBear' Backdoor Target South KoreaThe Hacker News·May 17, 06:51 UTC · May 17, 2024Malware42
N. Korea-linked Kimsuky Shifts to Compiled HTML Help Files in Ongoing CyberattacksThe Hacker News·Apr 2, 04:40 UTC · Apr 2, 2024Threat actor57
N. Korean Kimsuky APT targets S. KoreaSecurity Affairs·Aug 20, 17:38 UTC · Aug 20, 2023Threat actor57
North Korea-linked Kimsuky APT uses new recon tool ReconSharkSecurity Affairs·May 22, 20:32 UTC · May 22, 2023Threat actor57
North Korean APT Kimsuky hacked South Korea’s KAERI agencySecurity Affairs·Jun 19, 16:41 UTC · Jun 19, 2021Threat actor57
North Korea-Linked APT Group Kimsuky spotted using new malwareSecurity Affairs·Nov 2, 16:40 UTC · Nov 2, 2020Malware42
Kimsuky Deploys HTTPSpy, Expands Arsenal with HelloDoor and VS Code TunnelsThe Hacker News·May 30, 06:13 UTC · May 30, 2026Threat actor157
North Korean Kimsuky used a new Linux backdoor in recent attacksSecurity Affairs·May 19, 11:13 UTC · May 19, 2024Malware42
North Korean Kimsuky Hackers Strike Again with Advanced Reconnaissance MalwareThe Hacker News·May 24, 06:59 UTC · May 24, 2023Malware42
North Korean APT Kimsuky Launches Global SpearInfosecurity Magazine·May 5, 17:00 UTC · May 5, 2023Threat actor57
DOD, FBI, DHS warn of active North Korean governmentCyberScoop·Oct 27, 17:00 UTC · Oct 27, 2020Exploit / PoC in the wild60
Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware DevelopmentThe Hacker News·Aug 10, 13:21 UTC · Aug 10, 2026Malware42
North Korea-linked Kimsuky APT attack targets victims via MessengerSecurity Affairs·May 20, 06:23 UTC · May 20, 2024Threat actor57
U.S. Treasury Sanctions North Korean Kimsuky Hackers and 8 ForeignThe Hacker News·Dec 1, 09:02 UTC · Dec 1, 2023Threat actor45
Kimsuky Hackers Spotted Using 3 New Android Malware to Target South KoreansThe Hacker News·Oct 26, 15:50 UTC · Oct 26, 2022Malware42
New Kimsuky campaign compromised South Korean software vendorsThe Record·Jul 22, 16:54 UTC · Jul 22, 2026Threat actor57
North Korean Kimsuky Hackers Use Russian Email Addresses for Credential Theft AttacksThe Hacker News·Dec 3, 09:51 UTC · Dec 3, 2024Threat actor45
Kimsuky Using TRANSLATEXT Chrome Extension to Steal Sensitive DataThe Hacker News·Jun 28, 16:19 UTC · Jun 28, 2024Threat actorCVE-2017-1188260
Kimsuky Hackers Deploying AppleSeed, Meterpreter, and TinyNuke in Latest AttacksThe Hacker News·Dec 29, 10:16 UTC · Dec 29, 2023Threat actor57
N. Korea's Kimsuky Targeting South Korean Research Institutes with Backdoor AttacksThe Hacker News·Dec 9, 05:08 UTC · Dec 9, 2023Malware42
Kimsuky Targets Think Tanks and News Media with Social Engineering AttacksThe Hacker News·Aug 23, 12:49 UTC · Aug 23, 2023Threat actor57
German and South Korean Agencies Warn of Kimsuky's Expanding Cyber Attack TacticsThe Hacker News·Mar 25, 05:40 UTC · Mar 25, 2023Threat actor57