threat actor

Kimsuky

unknownentity:threat_actor

This threat actor targets South Korean think tanks, industry, nuclear power operators, and the Ministry of Unification for espionage purposes.

Curated · btcintel

claims we make, each with its source and citation · sources may contradict; we show the set, never a score

Facts

id: kimsuky
kind: threat actor
status: unknown
aliases: APT43 · Black Banshee · Earth Kumiho · Emerald Sleet · G0086 · Operation Stolen Pencil · PatheticSlug · Sparkling Pisces · Springtail · TA427 · Thallium · THALLIUM · Velvet Chollima
jurisdictions: —
claims naming it: 0 · 0 attributions · 13 relations · 0 events

Identifiers

attack G0094via mitre-attack
misp-galaxy aac49b4e-74e9-49fa-84f9-e340cf8bafbcvia misp-galaxy-threat-actor
misp-galaxy bcaaad6f-0597-4b89-b69b-84a6be2b7bc3via misp-galaxy-threat-actor

Relations

MITRE ATT&CK Enterpriserecords thatKimsukyusesTroll Stealer
fetch —sha256 dc1639caa5501d72
rel_37btcintel:relations:37@v1 sha256:f616aab8d7f930d9
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatKimsukyusesHTTPTroy
fetch —sha256 dc1639caa5501d72
rel_38btcintel:relations:38@v1 sha256:97fa83d5e6145e1f
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatKimsukyusesAmadey
fetch —sha256 dc1639caa5501d72
rel_39btcintel:relations:39@v1 sha256:28ea8f867ed7389c
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatKimsukyusesGoBear
fetch —sha256 dc1639caa5501d72
rel_40btcintel:relations:40@v1 sha256:ff4e350722c6e622
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatKimsukyusesBrave Prince
fetch —sha256 dc1639caa5501d72
rel_41btcintel:relations:41@v1 sha256:e2d12eea7e3b7543
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatKimsukyusesgh0st RAT
fetch —sha256 dc1639caa5501d72
rel_42btcintel:relations:42@v1 sha256:360b4681a660f91d
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatKimsukyusesAppleSeed
fetch —sha256 dc1639caa5501d72
rel_43btcintel:relations:43@v1 sha256:8c27480d844d447c
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatKimsukyusesGomir
fetch —sha256 dc1639caa5501d72
rel_44btcintel:relations:44@v1 sha256:45f4b72ddf6d586b
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatKimsukyusesNOKKI
fetch —sha256 dc1639caa5501d72
rel_45btcintel:relations:45@v1 sha256:06ec7977b994719a
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatKimsukyusesGold Dragon
fetch —sha256 dc1639caa5501d72
rel_46btcintel:relations:46@v1 sha256:ff61d2f419c6f4e9
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatKimsukyusesKGH_SPY
fetch —sha256 dc1639caa5501d72
rel_47btcintel:relations:47@v1 sha256:04d060648f0a5896
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatKimsukyusesBabyShark
fetch —sha256 dc1639caa5501d72
rel_48btcintel:relations:48@v1 sha256:fd45f2b858fb7dde
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatKimsukyusesTRANSLATEXT
fetch —sha256 dc1639caa5501d72
rel_49btcintel:relations:49@v1 sha256:b0d529da19c78cf2
confidenceauthority data · 60

Events

computedno dated events recorded for this entity

Claims naming this entity

computedno current claim names this entity

Subjects0 subjects carry a claim naming this entity · a sample

computedno subject carries a claim naming this entity

Community

notes from Nostr labelers · never merged with the bands above · not endorsed

Community content is indexed from Nostr and not endorsed by btcintel.

not computed yetNot indexed yet: the community index has not looked at this subject.