Triple Threat: TA406 · 01.01.2021
North Korean state-sponsored hacking group TA406, one of three threat actors that Proofpoint tracks as part of Kimsuky activity, targeted high-value targets in an espionage campaign mostly focused on credential harvesting. In addition, the North Korean group used the stolen information to make ransom demands.
22nd November – Threat Intelligence Report · 2021-11-22
State-sponsored North Korean cyber espionage group TA406 is targeting diplomats and government officials in the US, Russia, China and South Korea in a credential harvesting campaign using custom made malware and phishing attacks.
Policy experts, journalists and nongovernmental organizations (NGOs). · 18/11/2021
Researchers From Proofpoint reveal the details carried out by the threat actor TA406. [Date Occurred: Since at least January 2021; Date Discovered: -]
TA406 credential theft campaigns (2021) against foreign policy experts, journalists and NGOs · November 18, 2021
Throughout 2021, the North Korea-aligned threat actor TA406 conducted frequent credential theft campaigns targeting research, education, government, media and other organizations. ... From January through June 2021, Proofpoint observed almost weekly campaigns targeting foreign policy experts, journalists and nongovernmental organizations (NGOs).