Operation Penta Storm was a high-volume spearphishing campaign attributed to North Korea’s Reconnaissance General Bureau Department 5, commonly tracked as Kimsuky. Disclosed in December 2020, it targeted more than 40 South Korean organizations across the corporate, university, financial, legal, and media sectors. Operators sent large numbers of phishing messages each day as part of a coordinated effort against a broad institutional victim set.