Individuals and organizations in South Korea, Japan, and the United States

CSIS Significant Cyber Incidents

The FBI, CISA and U.S. Cyber Command announced that a North Korean hacking group had been conducting a cyber espionage campaign against individual exper ts, think tanks, and government entities in South Korea, Japan, and the United States with the purpose of collecting intelligence on national security issues related to the Korean peninsula, sanctions, and nuclear policy

CFR Cyber Operations Tracker

The North Korean threat actor APT Kimsuky targeted think tanks in the United States, Japan, and South Korea working on nuclear policy and sanctions. The hackers used spear-phishing emails and watering-hole attacks to gain access to victims’ networks.

Hackmageddon cyber attacks timelines (Paolo Passeri)

The Cybersecurity and Infrastructure Security Agency (CISA), the FBI, and the Cyber Command Cyber National Mission Force (CNMF), release an alert about the North Korean Threat Actor Kimsuky (AKA Hidden Cobra) targeting individuals and organizations in South Korea, Japan, and the United States.

Dailysecu 데일리시큐 (dailysecu.com)

attribution sentence(s): 김수키 조직의 해킹공격 기술적 분석도 공개…경감조치 권고 | 미국 정부기관 합동 발표한 김수키 조직에 대한 리포트 일부. | 미국 정부(사이버인프라보호청(CISA), 연방수사국(FBI), 사이버사령부(CNMF))는 북한의 지능형지속공격(APT: Advanced Persistent Threat) 해킹 조직인 김수키(Kimsuky) 관련 합동경보를 지난 10월 27일 발령했다.

against individual experts, think tanks, and government entities in South Korea, Japan, and the United States

The North Korean threat actor APT Kimsuky targeted think tanks in the United States, Japan, and South Korea working on nuclear policy and sanctions.