2024-04-17
Genians
APT43 배후의 다단계 드롭박스 명령과 TutorialRAT
#APT43
#TutorialRAT
#LNK
APT43
"Mandiant has tracked this group since 2018, and APT43’s collection priorities align with the mission of the Reconnaissance General Bureau (RGB), North Korea's main foreign intelligence service."
- Mandiant, https://www.mandiant.com/resources/blog/apt43-north-korea-cybercrime-espionage
Also known as
| Name | Named by | AKA | First seen | Last seen |
|---|---|---|---|---|
| APT-C-55 | Qihoo360 | Kimsuky | 2021-11-19 | 2024-06-12 |
| APT-Q-2 | Qianxin | Kimsuky | 2022-03-23 | 2024-06-20 |
| APT43 | Mandiant | Kimsuky | 2023-03-28 | 2024-04-17 |
| ARCHIPELAGO | APT43 | 2023-04-05 | 2023-04-05 | |
| BlackBanshee | PWC | Kimsuky | 2020-02-18 | 2022-04-29 |
| Cerium | Microsoft | Kimsuky | 2021-10-07 | 2022-11-07 |
| CloudDragon | TeamT5 | Kimsuky | 2021-05-07 | 2023-05-12 |
| G0094 | MITRE | Kimsuky | 2019-08-26 | 2019-08-26 |
| ITG16 | IBM | Kimsuky | - | - |
| KTA082 | Kroll | Kimsuky | 2024-03-05 | 2024-03-05 |
| KimDragon | TeamT5 | Kimsuky | 2021-05-07 | 2021-05-07 |
| Kimsuky | Kaspersky | - | 2013-09-11 | 2024-10-04 |
| NNPTGroup | SelfGiven | Kimsuky | 2014-12-15 | 2015-04-02 |
| NickelKimball | SecureWorks | Kimsuky | - | - |
| Phisherman | KRCERT | Kimsuky | 2020-02-29 | - |
| RGB-D5 | IssuemakersLab | Kimsuky | 2020-04-08 | 2020-12-24 |
| RedKim | KRCERT | Kimsuky | - | - |
| SectorA05 | NSHC | Kimsuky | 2019-01-10 | 2024-09-19 |
| SeedpuNK | S2W | Kimsuky | 2024-10-02 | 2024-10-02 |
| SharpTongue | Volexity | Kimsuky | 2022-07-28 | 2023-10-05 |
| SparklingPisces | PaloaltoNetworks | Kimsuky | 2024-09-09 | 2024-09-26 |
| Springtail | Symantec | Kimsuky | 2024-03-20 | 2024-05-16 |
| TA408 | Proofpoint | Kimsuky | 2021-11-19 | 2021-11-19 |
| TA427 | Proofpoint | Kimsuky | 2021-11-19 | 2024-04-20 |
| TAG-46 | RecordedFuture | Kimsuky | 2024-01-10 | 2024-01-10 |
| TAG-66 | RecordedFuture | Kimsuky | 2024-01-10 | 2024-01-10 |
| Thallium | Microsoft | Kimsuky | 2019-12-30 | 2022-02-16 |
| UAT-5394 | CiscoTalos | Kimsuky | 2024-08-21 | 2024-09-02 |
| UNC1130 | Mandiant | Kimsuky | 2021-08-18 | 2022-08-18 |
| UNC1873 | Mandiant | APT43 | 2023-03-28 | 2023-03-28 |
| UNC3782 | Mandiant | APT43 | 2023-04-20 | 2023-04-20 |
| UNC4469 | Mandiant | APT43 | 2023-04-20 | 2023-04-20 |
| VelvetChollima | CrowdStrike | Kimsuky | 2019-02-19 | 2019-02-19 |