DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

TA406 (3)

Events whose actors field, as written by the source, names this.

Date (as written)IncidentCountryActors
01.07.2019Fractured StatueUnited StatesTA406/Konni Group/Opal Sleet fka OSMIUM < Kimsuky
November 18, 2021TA406 credential theft campaigns (2021) against foreign policy experts, journalists and NGOsTA406 (part of Kimsuky / Thallium / Konni)
May 13, 2025TA406 phishing and malware against Ukrainian government entities (February 2025)Ukraine; Russia (historical)TA406 (Opal Sleet, Konni)