Kaspersky Securelist
APT Trends report Q1 2018 (DPRK-related paragraph 2) · 2018-04-12
Probably one of the most interesting activities relates to Kimsuky , an actor with a North-Korean nexus interested in South Korean think tanks and political activities. The actor renewed its arsenal with a completely new framework designed for cyberespionage, which was used in a spear-phishing campaign against South Korean targets, similar to the one targeting KHNP in 2014. According to McAfee, this activity was related to attacks against companies involved in the organization of the Pyeongchang Olympic Games, however we cannot confirm this.