CSIS entry 465 · May 2021
Cybersecurity researchers identified a North Korean hacking group to be responsible for a cyber espionage campaign, targeting high profile South Korean government officials, utilizing a phishing methodology. The group’s targets were based in South Korea and included: the Korea Internet and Security Agency (KISA), ROK Ministry of Foreign Affairs, Ambassador of the Embassy of Sri Lanka to the State (in ROK), International Atomic Energy Agency Nuclear Security Officer, Deputy Consul General at Korean Consulate General in Hong Kong, Seoul National University, and Daishin Securities.
Kimsuky APT continues to target South Korean government using AppleSeed backdoor · 2020-12
Kimsuky APT continues to target South Korean government using AppleSeed backdoor
https://blog.malwarebytes.com/threat-analysis/2021/06/kimsuky-apt-continues-to-target-south-korean-government-using-appleseed-backdoor/
South Korean government ministers · 2021-06-01
South Korean government ministers are hit with a spearfishing attack.
Targeting of South Korean government · Jun 2021
The South Korean government was targeted in a wide-ranging attack by North Korean threat actors. The attacks installed the AppleSeed backdoor, which was used to exfiltrate information.
High profile people within the government of South Korea · 01/06/2021
Researchers from Malwarebytes revel the details of the latest campaign by the North Korean group Kimsuky, targeting the South Korean government using the AppleSeed backdoor. [Date Occurred: -; Date Discovered: -]
Kimsuky APT continues to target South Korean government using AppleSeed backdoor · 2021-05-31T17:00:00+00:00
The Kimsuky APT—also known as Thallium, Black Banshee, and Velvet Chollima—is a North Korean threat actor that has been active since 2012. The group conducts cyber espionage operations to target government entities mainly in South Korea.