UN Panel of Experts S/2024/215
Cyber attack confirmed to have been carried out by North Korea’s ‘Kimsuky’ targeting ROK-US joint military exercises · August
Annex 59: List of DPRK Cyberthreat actors’ malicious activities monitored by the Panel in 2023 (row 32 of 75, PDF p. 324). DPRK cyber actor: Kimsuky; Report Name: Cyber attack confirmed to have been carried out by North Korea’s ‘Kimsuky’ targeting ROK-US joint military exercises; Case Summary: The Gyeonggi Police Agency in the Republic of Korea, in coordination with the U.S., uncovered malicious cyberattacks by Kimsuky targeting the ROK-U.S. combined military exercise battle simulation center. Kimsuky carried out continuous spearphishing attackson a ROK battle simulation company engaged in virtual war games and installed malicious code on the company’s system in January 2023 by hijacking the email account of an administrative employee of the company. Then the actors sent malicious emails disguised as certificates of tax withheld to the employees dispatched to the ROK -U.S. combined military battle simulation center.; Publication Month: August