Kimsuky
Nation-state Espionage North Korea Dormant
Aliases: Velvet Chollima · Emerald Sleet · Thallium · Black Banshee · APT43
- Mentions
- 1
- First seen
- 14 May 2026
- Last seen
- 14 May 2026
Relevant to you · Relevant
- Threat focus:
- espionage / apt
Origin
North Korea — North Korean RGB
Profile
Kimsuky is a North Korean cyber threat actor known for espionage operations. Recent reports indicate that the group is targeting organizations with PebbleDash-based tools. This campaign highlights the persistent threat posed by North Korean actors. The exact targets and affected regions are currently unspecified.
Associated malware / tools
PebbleDash