2024-09-26
PaloaltoNetworks
Unraveling Sparkling Pisces’s Tool Set: KLogEXE and FPSpy
#FPSpy
#KLogEXE
#SparklingPisces
SparklingPisces
Also known as
| Name | Named by | AKA | First seen | Last seen |
|---|---|---|---|---|
| APT-C-55 | Qihoo360 | Kimsuky | 2021-11-19 | 2026-05-13 |
| APT-Q-2 | Qianxin | Kimsuky | 2022-03-23 | 2025-06-18 |
| APT43 | Mandiant | Kimsuky | 2023-03-28 | 2025-11-12 |
| BlackBanshee | PWC | Kimsuky | 2020-02-18 | 2022-04-29 |
| Cerium | Microsoft | Kimsuky | 2021-10-07 | 2022-11-07 |
| CloudDragon | TeamT5 | Kimsuky | 2021-05-07 | 2023-05-12 |
| DarkPlum | NTTSecurity | Kimsuky | 2024-10-03 | 2025-04-01 |
| EarthKumiho | TrendMicro | Kimsuky | 2022-05-10 | 2026-04-16 |
| G0094 | MITRE | Kimsuky | 2019-08-26 | 2019-08-26 |
| ITG16 | IBM | Kimsuky | - | - |
| KTA082 | Kroll | Kimsuky | 2024-03-05 | 2024-03-05 |
| KimDragon | TeamT5 | Kimsuky | 2021-05-07 | 2021-05-07 |
| Kimsuky | Kaspersky | - | 2013-09-11 | 2026-06-01 |
| Larva-24005 | Ahnlab | Kimsuky | 2025-02-27 | 2025-04-19 |
| Larva-25004 | Ahnlab | Kimsuky | 2025-05-22 | 2025-11-12 |
| Larva-25010 | Ahnlab | Kimsuky | 2025-10-02 | 2025-10-02 |
| NNPTGroup | SelfGiven | Kimsuky | 2014-12-15 | 2015-04-02 |
| NickelKimball | SecureWorks | Kimsuky | - | 2024-10-08 |
| PatheticSlug | Cloudflare | Kimsuky | 2026-03-03 | 2026-03-03 |
| Phisherman | KRCERT | Kimsuky | 2020-02-29 | - |
| RGB-D5 | IssuemakersLab | Kimsuky | 2020-04-08 | 2020-12-24 |
| RedKim | KRCERT | Kimsuky | - | - |
| SectorA05 | NSHC | Kimsuky | 2019-01-10 | 2025-07-15 |
| SeedpuNK | S2W | Kimsuky | 2024-10-02 | 2024-10-02 |
| SharpTongue | Volexity | Kimsuky | 2022-07-28 | 2023-10-05 |
| SparklingPisces | PaloaltoNetworks | Kimsuky | 2024-09-09 | 2024-09-26 |
| Springtail | Symantec | Kimsuky | 2024-03-20 | 2025-04-07 |
| TA408 | Proofpoint | Kimsuky | 2021-11-19 | 2021-11-19 |
| TA427 | Proofpoint | Kimsuky | 2021-11-19 | 2025-07-01 |
| TAG-46 | RecordedFuture | Kimsuky | 2024-01-10 | 2024-01-10 |
| TAG-66 | RecordedFuture | Kimsuky | 2024-01-10 | 2024-01-10 |
| Thallium | Microsoft | Kimsuky | 2019-12-30 | 2022-02-16 |
| UAT-5394 | CiscoTalos | Kimsuky | 2024-08-21 | 2024-09-02 |
| UNC1130 | Mandiant | Kimsuky | 2021-08-18 | 2022-08-18 |
| VelvetChollima | CrowdStrike | Kimsuky | 2019-02-19 | 2026-05-14 |
| puNK-004 | S2W | Kimsuky | 2025-03-13 | 2025-03-13 |