Kaspersky Securelist
IT Threat Evolution: Q3 2013 (DPRK-related paragraph 2) · 2013-11-14
The earliest signs of Kimsuky’s activity date back to April 3, 2013, and the first Kimsuky Trojan samples appeared on May 5, 2013. This unsophisticated spy program includes several basic coding errors and handles communications to and from infected machines via a Bulgarian web-based free email server.