DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Black Banshee (6)

Events whose actors field, as written by the source, names this.

Date (as written)IncidentCountryActors
01.01.2013Operation“Kimsuky”Korea, Republic of;Korea, Republic of;Korea, Republic of;Korea, Republic of;China;China;China;ChinaKimsuky/Velvet Chollima/STOLEN PENCIL/Emerald Sleet fka THALLIUM/Black Banshee/G0094
01.06.2021Kimsuky vs. South Korean think tanksKorea, Republic ofKimsuky/Velvet Chollima/STOLEN PENCIL/Emerald Sleet fka THALLIUM/Black Banshee/G0094
01.12.2022North Korean state-sponsored hacking group Kimsuky targeted the staff of consulting firm Korea Risk Group (KRG) and other organizations in the United States, Europe and Asia since December 2022Korea, Republic of;Asia (region);Asia (region);Europe (region);Europe (region);United States;United StatesKimsuky/Velvet Chollima/STOLEN PENCIL/Emerald Sleet fka THALLIUM/Black Banshee/G0094
01.04.2023North Korean state-sponsored APT Kimsuky stole technical data from unnamed South Korean defence company via email hack from April to July 2023Korea, Republic ofKimsuky/Velvet Chollima/STOLEN PENCIL/Emerald Sleet fka THALLIUM/Black Banshee/G0094
01.05.2023North Korean state-sponsored hacking group Kimsuky stole documents from unspecified victims in May 2023Not availableKimsuky/Velvet Chollima/STOLEN PENCIL/Emerald Sleet fka THALLIUM/Black Banshee/G0094
21.02.2024North Korean state-sponsored hacker group Kimsuky exploited vulnerabilities to gain access to ScreenConnect customer systems since at least 21 February 2024Not availableKimsuky/Velvet Chollima/STOLEN PENCIL/Emerald Sleet fka THALLIUM/Black Banshee/G0094