DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

The Coordinated Embassy Hunt: Unmasking the DPRK-linked GitHub C2 Espionage Campaign

Date (as written)
August 18, 2025
Year
2025
Actors (as written)
DPRK-linked actors; Kimsuky
Actor pages
DPRK-linked actorsKimsuky
Tags (as written)
espionage; spear-phishing; embassies; GitHub C2; XenoRAT

Source entries (1)

Trellix Advanced Research Center

The Coordinated Embassy Hunt: Unmasking the DPRK-linked GitHub C2 Espionage Campaign · August 18, 2025
Between March and July 2025, DPRK-linked actors are believed to have carried out at least 19 spear-phishing email attacks against embassies worldwide [...] Key infrastructure analysis linked this campaign to known Kimsuky operations, with C2 servers matching previously identified DPRK espionage infrastructure.
https://www.trellix.com/blogs/research/dprk-linked-github-c2-espionage-campaign/

Suggest a correction on GitHub