CYFIRMA research
Spear Phishing Attack by N. Korean Hacking Group, Kimsuky · (no date on page)
Kimsuky (aka Velvet Chollima, Black Banshee, and Thallium) is a known N. Korean state-sponsored threat actor . The group has been active since 2012 and targeting businesses and individuals with new phishing themes . ... In recent campaigns, Kimsuky’s primary target is been observed to be pharmaceuticals firms.