DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

APT Group Kimsuky Targets University Researchers

Date (as written)
2024-07
Year
2024
Actors (as written)
Kimsuky, Velvet Chollima
Actor pages
KimsukyVelvet Chollima

Source entries (3)

ThaiCERT Threat Group Cards

APT Group Kimsuky Targets University Researchers · 2024-07
APT Group Kimsuky Targets University Researchers https://www.cyberresilience.com/threatintel/apt-group-kimsuky-targets-university-researchers/
https://www.cyberresilience.com/threatintel/apt-group-kimsuky-targets-university-researchers/

Hackmageddon cyber attacks timelines (Paolo Passeri)

University staff, researchers, and professors · 07/08/2024
Researchers from Resilience uncover critical details about the North Korean advanced persistent threat (APT) group Kimsuky, which has been targeting universities as part of its global espionage operations, using a custom tool called “SendMail [Date Occurred: In late July 2024; Date Discovered: In late July 2024]
https://www.hackmageddon.com/2024/11/13/1-15-august-2024-cyber-attacks-timeline/
https://www.infosecurity-magazine.com/news/north-korea-kimsuky-phishing

Boannews 보안뉴스 (boannews.com)

북한 김수키, 한국 대학교 노리는 공격 캠페인 펼쳐 · 2024-08-09
attribution sentence(s): 요약 : 보안 외신 해커뉴스에 의하면 북한의 해커 조직인 김수키(Kimsuky)가 대학교 교수와 교직원, 연구원들을 대상으로 새로운 공격을 실시하는 중이라고 한다. | 배경 : 김수키는 APT43이나 아키펠라고(ARCHIPELAGO), 블랙밴시(Black Banshee), 에머랄드슬리트(Emerald Sleet), 스프링테일(Springtail), 벨벳천리마(Velvet Chollima) 등의 이름으로도 불리는 해킹 조직이다. | 말말말 : “김수키는 기존에 사용되고 있던 해킹 도구들을 가져다가 커스터마이징을 한 뒤 사용하는 것으로도 잘 알려져 있습니다.
https://m.boannews.com/html/detail.html?idx=131938

Suggest a correction on GitHub