North Korean attackers use malicious blogs to deliver malware to highCisco Talos·Nov 10, 22:11 UTC · Nov 10, 2021Malware42
The North Korean Kimsuky APT threatens South Korea evolving its TTPsSecurity Affairs·Mar 3, 18:48 UTC · Mar 3, 2020Threat actor157
Experts detail a new Kimsuky social engineering campaignSecurity Affairs·Jun 8, 18:04 UTC · Jun 8, 2023Threat actor57
North Korea-linked APT Kimsuky targeted German defense firm Diehl DefenceSecurity Affairs·Oct 1, 07:06 UTC · Oct 1, 2024Threat actor57
North Korean APT Group Kimsuky Expands Social Engineering TacticsInfosecurity Magazine·Jun 7, 17:00 UTC · Jun 7, 2023Threat actor57
North Korea–linked APT Kimsuky behind quishing attacks, FBI warnsSecurity Affairs·Jan 10, 15:34 UTC · Jan 10, 2026Threat actorCVE-2019-0708CVE-2017-1188260
Kimsuky Spreads DocSwap Android Malware via QR Phishing Posing as Delivery AppThe Hacker News·Dec 19, 10:33 UTC · Dec 19, 2025MalwareCVE-2024-3819347
Kimsuky APT poses as journalists and broadcast writers in attacksSecurity Affairs·Jun 3, 16:11 UTC · Jun 3, 2023Threat actor57
North Korea’s Kimsuky cyber-spies earn an alert from Washington, SeoulThe Record·Jun 2, 14:48 UTC · Jun 2, 2023Threat actor57
Kimsuky APT exploited BlueKeep RDP flaw in attacks against South Korea and JapanSecurity Affairs·Apr 21, 18:25 UTC · Apr 21, 2025Threat actorCVE-2019-0708CVE-2017-1188260
Kimsuky Group used custom RDP Wrapper versionSecurity Affairs·Feb 8, 18:15 UTC · Feb 8, 2025Threat actor57
North Korea's Kimsuky Group Mimics Key Figures in Targeted Cyber AttacksThe Hacker News·Jun 3, 05:07 UTC · Jun 3, 2023Threat actor57
Kimsuky's New Golang Stealer 'Troll' and 'GoBear' Backdoor Target South KoreaThe Hacker News·May 17, 06:51 UTC · May 17, 2024Malware42
N. Korea-linked Kimsuky Shifts to Compiled HTML Help Files in Ongoing CyberattacksThe Hacker News·Apr 2, 04:40 UTC · Apr 2, 2024Threat actor57
N. Korean Kimsuky APT targets S. KoreaSecurity Affairs·Aug 20, 17:38 UTC · Aug 20, 2023Threat actor57
North Korea-linked Kimsuky APT uses new recon tool ReconSharkSecurity Affairs·May 22, 20:32 UTC · May 22, 2023Threat actor57
North Korean APT Kimsuky hacked South Korea’s KAERI agencySecurity Affairs·Jun 19, 16:41 UTC · Jun 19, 2021Threat actor57
North Korea-Linked APT Group Kimsuky spotted using new malwareSecurity Affairs·Nov 2, 16:40 UTC · Nov 2, 2020Malware42
Kimsuky Deploys HTTPSpy, Expands Arsenal with HelloDoor and VS Code TunnelsThe Hacker News·May 30, 06:13 UTC · May 30, 2026Threat actor157
North Korean Kimsuky used a new Linux backdoor in recent attacksSecurity Affairs·May 19, 11:13 UTC · May 19, 2024Malware42
North Korean Kimsuky Hackers Strike Again with Advanced Reconnaissance MalwareThe Hacker News·May 24, 06:59 UTC · May 24, 2023Malware42
North Korean APT Kimsuky Launches Global SpearInfosecurity Magazine·May 5, 17:00 UTC · May 5, 2023Threat actor57
Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware DevelopmentThe Hacker News·Aug 10, 13:21 UTC · Aug 10, 2026Malware42
North Korea-linked Kimsuky APT attack targets victims via MessengerSecurity Affairs·May 20, 06:23 UTC · May 20, 2024Threat actor57
Kimsuky Hackers Spotted Using 3 New Android Malware to Target South KoreansThe Hacker News·Oct 26, 15:50 UTC · Oct 26, 2022Malware42
New Kimsuky campaign compromised South Korean software vendorsThe Record·Jul 22, 16:54 UTC · Jul 22, 2026Threat actor57
Kimsuky Using TRANSLATEXT Chrome Extension to Steal Sensitive DataThe Hacker News·Jun 28, 16:19 UTC · Jun 28, 2024Threat actorCVE-2017-1188260
Kimsuky Hackers Deploying AppleSeed, Meterpreter, and TinyNuke in Latest AttacksThe Hacker News·Dec 29, 10:16 UTC · Dec 29, 2023Threat actor57
N. Korea's Kimsuky Targeting South Korean Research Institutes with Backdoor AttacksThe Hacker News·Dec 9, 05:08 UTC · Dec 9, 2023Malware42
Kimsuky Targets Think Tanks and News Media with Social Engineering AttacksThe Hacker News·Aug 23, 12:49 UTC · Aug 23, 2023Threat actor57
German and South Korean Agencies Warn of Kimsuky's Expanding Cyber Attack TacticsThe Hacker News·Mar 25, 05:40 UTC · Mar 25, 2023Threat actor57
GoldDragon campaign: Kimsuky APT adopts victim verification techniqueSecurity Affairs·Aug 26, 08:36 UTC · Aug 26, 2022Threat actor57
New Kimsuky Module Makes North Korean Spyware More PowerfulThe Hacker News·Nov 3, 11:49 UTC · Nov 3, 2020Malware42
North Korean APT Kimsuky Uses forceCopy Malware to Steal BrowserThe Hacker News·Feb 7, 03:40 UTC · Feb 7, 2025Malware42
Kimsuky Group Adopts New Phishing Tactics to Target VictimsInfosecurity Magazine·Dec 3, 16:30 UTC · Dec 3, 2024Threat actor57
North Korean APT group ‘Kimsuky’ targeting experts with new spearphishing campaignThe Record·Mar 22, 23:57 UTC · Mar 22, 2023Threat actor57
North Korean Hackers Target Web3 with Nim Malware and Use ClickFix in BabyShark CampaignThe Hacker News·Jul 3, 09:00 UTC · Jul 3, 2025Malware42
North Korean Konni APT Targets Ukraine with Malware to track Russian Invasion ProgressThe Hacker News·May 15, 00:00 UTC · May 15, 2025Malware42
Kimsuky APT Deploying Linux Backdoor Gomir in South Korean Cyber AttacksThe Hacker News·May 17, 17:07 UTC · May 17, 2024Malware42