DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

North Korea Using Social Engineering to Enable Hacking of Think Tanks, Academia, and Media

Date (as written)
2023-05
Year
2012
Actors (as written)
Kimsuky, Velvet Chollima
Actor pages
KimsukyVelvet Chollima

Source entries (2)

ThaiCERT Threat Group Cards

North Korea Using Social Engineering to Enable Hacking of Think Tanks, Academia, and Media · 2023-05
North Korea Using Social Engineering to Enable Hacking of Think Tanks, Academia, and Media https://media.defense.gov/2023/Jun/01/2003234055/-1/-1/0/JOINT_CSA_DPRK_SOCIAL_ENGINEERING.PDF https://www.sentinelone.com/labs/kimsuky-new-social-engineering-campaign-aims-to-steal-credentials-and-gather-strategic-intelligence/
https://media.defense.gov/2023/Jun/01/2003234055/-1/-1/0/JOINT_CSA_DPRK_SOCIAL_ENGINEERING.PDF
https://www.sentinelone.com/labs/kimsuky-new-social-engineering-campaign-aims-to-steal-credentials-and-gather-strategic-intelligence/

FBI/State/NSA + ROK NIS/NPA/MOFA Joint CSA CSA-20230601-1 "North Korea Using Social Engineering to Enable Hacking of Think Tanks, Academia, and Media" (June 1, 2023; copy fetched from content.govdelivery.com)

Kimsuky spearphishing campaigns posing as journalists, academics · since at least 2012
These North Korean cyber actors are known to conduct spearphishing campaigns posing as real journalists, academics, or other individuals with credible links to North Korean policy circles.
https://media.defense.gov/2023/Jun/01/2003234055/-1/-1/0/JOINT_CSA_DPRK_SOCIAL_ENGINEERING.PDF

Suggest a correction on GitHub