lazarusholic

Everyday is lazarus.dayβ

NickelKimball

SecureWorks
https://www.secureworks.com/research/threat-profiles/nickel-kimball
"NICKEL KIMBALL has operated on behalf of the North Korean government since at least 2012. It primarily targets non-governmental organizations (NGOs), think tanks, diplomatic agencies, military organizations, economic groups, and research entities, particularly those involved with North Korean policy and relations. The group originally appeared to focus on South Korean organizations before expanding to similar organizations in other countries. The threat actors also seek to obtain access to online accounts and networks to track North Korean defectors and their relatives."

- SecureWorks, https://www.secureworks.com/research/threat-profiles/nickel-kimball

Also known as

 
Name Named by AKA First seen Last seen
APT-C-55 Qihoo360 Kimsuky 2021-11-19 2024-06-12
APT-Q-2 Qianxin Kimsuky 2022-03-23 2024-03-05
APT43 Mandiant Kimsuky 2023-03-28 2024-04-17
BlackBanshee PWC Kimsuky 2020-02-18 2022-04-29
Cerium Microsoft Kimsuky 2021-10-07 2022-11-07
CloudDragon TeamT5 Kimsuky 2021-05-07 2023-05-12
G0094 MITRE Kimsuky 2019-08-26 2019-08-26
ITG16 IBM Kimsuky - -
KTA082 Kroll Kimsuky 2024-03-05 2024-03-05
KimDragon TeamT5 Kimsuky 2021-05-07 2021-05-07
Kimsuky Kaspersky - 2013-09-11 2024-07-17
NNPTGroup SelfGiven Kimsuky 2014-12-15 2015-04-02
NickelKimball SecureWorks Kimsuky - -
RGB-D5 IssuemakersLab Kimsuky 2020-04-08 2020-12-24
RedKim KRCERT Kimsuky - -
SectorA05 NSHC Kimsuky 2019-01-10 2024-07-12
SharpTongue Volexity Kimsuky 2022-07-28 2023-10-05
Springtail Symantec Kimsuky 2024-03-20 2024-05-16
TA408 Proofpoint Kimsuky 2021-11-19 2021-11-19
TA427 Proofpoint Kimsuky 2021-11-19 2024-04-20
TAG-46 Recordedfuture Kimsuky 2024-01-10 2024-01-10
TAG-66 Recordedfuture Kimsuky 2024-01-10 2024-01-10
Thallium Microsoft Kimsuky 2019-12-30 2022-02-16
UNC1130 Mandiant Kimsuky 2021-08-18 2022-08-18
VelvetChollima CrowdStrike Kimsuky 2019-02-19 2019-02-19