| 2012-06 | JoongangIlbo | Korea, Republic of | Is One |
| 01.01.2012 | North Korea espionage campaign | Korea, Republic of;Korea, Republic of;Korea, Republic of;Korea, Republic of;Korea, Republic of;Korea, Republic of;Korea, Republic of;Korea, Republic of;Korea, Republic of;Korea, Republic of;Japan;Japan;Japan;Japan;Japan;Japan;Japan;Japan;Japan;Japan;Vietnam;Vietnam;Vietnam;Vietnam;Vietnam;Vietnam;Vietnam;Vietnam;Vietnam;Vietnam;Middle East (region);Middle East (region);Middle East (region);Middle East (region);Middle East (region);Middle East (region);Middle East (region);Middle East (region);Middle East (region);Middle East (region) | APT37/Richochet Chollima/Red Eyes/InkySquid/ScarCruft/Reaper/Group123/TEMP.Reaper/Venus 121/G0067 |
| 2023-05 | North Korea Using Social Engineering to Enable Hacking of Think Tanks, Academia, and Media | | Kimsuky, Velvet Chollima |
| 2012 | Spying on South Korean users. | | Reaper, APT 37, Ricochet Chollima, ScarCruft |
| Active since 2012 | Kimsuky spear-phishing espionage against government, research centers, think tanks, academia, news media | Europe, Japan, Russia, South Korea, and the United States | Kimsuky (APT43, Emerald Sleet, Velvet Chollima, TA406, Black Banshee) |
| since at least 2012 | Konni espionage against Russian government officials and Russian foreign policy targets | Russian Federation | Konni (also known as TA406) |