lazarus.day
Actors
Reports
Incidents
IoCs
Analytics
Actors
Reports
Incidents
IoCs
Support
G0094
2019-08-26 •
MITRE
•
Kimsuky
Share:
43
Related Actors
788
Related Reports
Related Actors
APT-C-55
Qihoo360
Kimsuky
First seen:
Nov 2021
Last seen:
May 2026
Black Banshee
PWC
Kimsuky
First seen:
Feb 2020
Last seen:
May 2026
TAG-46
Recorded Future
Kimsuky
First seen:
Jan 2024
Last seen:
Jan 2024
TAG-66
Recorded Future
Kimsuky
First seen:
Jan 2024
Last seen:
Jan 2024
KTA082
Kroll
Kimsuky
First seen:
Mar 2024
Last seen:
Mar 2024
Cerium
Microsoft
Kimsuky
First seen:
Oct 2021
Last seen:
Nov 2022
UNC1873
Mandiant
APT43
First seen:
Mar 2023
Last seen:
Mar 2023
Springtail
Symantec
Kimsuky
First seen:
Mar 2024
Last seen:
May 2026
NNPTGroup
Self Given
Kimsuky
First seen:
Apr 2015
Last seen:
Apr 2015
Whoam I
Self Given
NNPTGroup
First seen:
Apr 2015
Last seen:
Apr 2015
Kimsuky
Kaspersky
First seen:
Sep 2013
Last seen:
Jun 2026
Phisherman
KRCERT
Kimsuky
UAT-5394
Cisco Talos
Kimsuky
First seen:
Aug 2024
Last seen:
Sep 2024
Sharp Tongue
Volexity
Kimsuky
First seen:
Jul 2022
Last seen:
Oct 2023
Sparkling Pisces
Paloalto Networks
Kimsuky
First seen:
Sep 2024
Last seen:
May 2026
TA408
Proofpoint
Kimsuky
First seen:
Nov 2021
Last seen:
Nov 2021
TA427
Proofpoint
Kimsuky
First seen:
Nov 2021
Last seen:
Jul 2025
Thallium
Microsoft
Kimsuky
First seen:
Dec 2019
Last seen:
Feb 2022
Seedpu NK
S2W
Kimsuky
First seen:
Oct 2024
Last seen:
Oct 2024
Dark Plum
NTTSecurity
Kimsuky
First seen:
Oct 2024
Last seen:
Apr 2025
Red Kim
KRCERT
Kimsuky
Larva-24005
Ahnlab
Kimsuky
First seen:
Feb 2025
Last seen:
Apr 2025
pu NK-004
S2W
Kimsuky
First seen:
Mar 2025
Last seen:
Mar 2025
Earth Kumiho
Trend Micro
Kimsuky
First seen:
May 2022
Last seen:
Apr 2026
Sector A05
NSHC
Kimsuky
First seen:
Jan 2019
Last seen:
Jul 2025
Larva-25004
Ahnlab
Kimsuky
First seen:
May 2025
Last seen:
Nov 2025
UNC1130
Mandiant
Kimsuky
First seen:
Aug 2022
Last seen:
Aug 2022
Velvet Chollima
Crowd Strike
Kimsuky
First seen:
Feb 2019
Last seen:
May 2026
RGB-D5
Issuemakers Lab
Kimsuky
First seen:
Apr 2020
Last seen:
Dec 2020
Larva-25010
Ahnlab
Kimsuky
First seen:
Oct 2025
Last seen:
Oct 2025
APT-Q-2
Qianxin
Kimsuky
First seen:
Mar 2022
Last seen:
Jun 2025
Nickel Kimball
Secure Works
Kimsuky
First seen:
May 2022
Last seen:
Oct 2024
APT43
Mandiant
Kimsuky
First seen:
Mar 2023
Last seen:
May 2026
ARCHIPELAGO
Google
APT43
First seen:
Apr 2023
Last seen:
Apr 2023
Pathetic Slug
Cloudflare
Kimsuky
First seen:
Mar 2026
Last seen:
Mar 2026
Ruby Sleet
Microsoft
Cerium
First seen:
Apr 2023
Last seen:
May 2026
Emerald Sleet
Microsoft
Thallium
First seen:
Apr 2023
Last seen:
Mar 2026
UNC3782
Mandiant
APT43
First seen:
Apr 2023
Last seen:
Nov 2025
UNC4469
Mandiant
APT43
First seen:
Apr 2023
Last seen:
Apr 2023
MB-0010
Synaptic Security
Kimsuky
First seen:
Jun 2026
Last seen:
Jun 2026
ITG16
IBM
Kimsuky
First seen:
Mar 2024
Last seen:
Mar 2024
Cloud Dragon
Team T5
Kimsuky
First seen:
May 2021
Last seen:
May 2023
Kim Dragon
Team T5
Kimsuky
First seen:
May 2021
Last seen:
May 2021
Related Reports in This Cluster
Top Authors
View G0094 reports only
2026-06-29
Hauri
군사·안보 학술지로 위장한 Kimsuky 정찰용 악성코드
#Kimsuky
#LNK
#GitHub
2026-06-29
Synaptic Security
Inside Kimsuky’s CHM Tradecraft: Multi-Stage Execution and Selective Payload Delivery
#CHM
#T1218.001
#T1059.001
#T1059.005
#T1053.005
#T1082
#T1083
#T1057
#T1112
#T1140
#T1105
#T1041
#T1071.001
#MB-0010
#Kimsuky
2026-06-29
Ahnlab
May 2026 Threat Trend Report on APT Attacks (South Korea)
#Trend
#Kimsuky
#LNK
2026-06-29
Ahnlab
2026년 5월 APT 공격 동향 보고서(국내)
#Trend
#Kimsuky
#LNK
2026-06-25
IIJSECT
LOTSを活用して進化を続けるKimJongRAT
#KimjongRAT
#Kimsuky
#MeshAgent
#GitHub
#LNK
2026-06-25
Cyfirma
APT QUARTERLY REPORT : APR TO JUN 2026
#Lazarus
#Kimsuky
#Andariel
#SapphireSleet
#Trend
2026-06-17
Ahnlab
개인정보 동의서인 줄 알았던 바로가기 파일의 정체는?
#Kimsuky
#LNK
#T1059.001
#T1053.005
#T1105
#T1204.002
2026-06-16
Ahnlab
May 2026 Threat Trend Report on APT Groups
#Trend
#Lazarus
#FamousChollima
#Kimsuky
#TA-RedAnt
2026-06-16
Ahnlab
2026년 5월 APT 그룹 동향 보고서
#Lazarus
#FamousChollima
#Kimsuky
#TA-RedAnt
#Trend
2026-06-12
i QBlack
DEVIL MARLBORO offers for sale an alleged intelligence package linked to Kimsuky and Lazarus Group
#Kimsuky
#Lazarus
#Suspicious
2026-06-09
ESTSecurity
개인정보 유출 의심 문의로 위장한 Kimsuky 스피어피싱 사례 분석
#Kimsuky
#Phishing
#LNK
#T1566.001
#T1204.002
#T1059.001
#T1053.005
#T1547.001
#T1102
#T1071.001
#T1027
#T1140
#T1497
2026-06-01
Idanmalihi
Tracking North Korea Nation-State APT Infrastructure: Kimsuky
#Kimsuky
2026-05-27
ENKI
Kimsuky의 고도화된 공격 기법 분석: JSONPing, Webex 사칭, 그리고 새로운 HttpSpy 변종
#HttpSpy
#JSONPing
#Kimsuky
#T1566
#T1059.007
#T1204.002
#T1547.001
#T1053.005
#T1027.009
#T1027.010
#T1027.013
#T1140
#T1620
#T1497.001
#T1055.001
#T1071.001
#T1132.001
#T1573.001
#T1113
#T1041
#T1636.004
2026-05-27
ENKI
Kimsuky's Advanced Attack Techniques: JSONPing, Webex Spoofing, and a New HttpSpy Variant
#Kimsuky
#JSONPing
#HttpSpy
#T1566
#T1059.003
#T1059.007
#T1204.002
#T1547.001
#T1053.005
#T1027
#T1140
#T1620
#T1497.001
#T1055.001
#T1070.004
#T1070.006
#T1071.001
#T1132.001
#T1573.001
#T1090
#T1636.004
#T1027.013
2026-05-27
Ahnlab
‘보안 메일’도 안심 금물! 카드사 사칭 악성 파일 유포 중
#Kimsuky
#Phishing
#LNK
#MeshAgent
#T1566.001
#T1204.002
#T1059.001
#T1218.005
#T1105
#T1027
#T1140
#T1056.001
#T1115
#T1055
#T1497.003
1
2
3
»
53
View G0094 reports only