[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fbnxM3LJ_ewnDB-qaR5SmplPfgoOWST-AdgPId8KnlXo":3},{"success":4,"data":5},true,{"name":6,"slug":7,"aliases":8,"description":19,"country":20,"suspected_sponsor":21,"target_industries":22,"target_countries":25,"incident_types":30,"references":32,"techniques":52,"technique_count":181,"created_at":182,"seoMetadata":183,"schemaOrg":187},"Kimsuky","kimsuky",[9,10,11,12,13,14,15,16,17,18],"Velvet Chollima","Black Banshee","Thallium","Operation Stolen Pencil","G0086","APT43","Emerald Sleet","THALLIUM","Springtail","Sparkling Pisces","This threat actor targets South Korean think tanks, industry, nuclear power operators, and the Ministry of Unification for espionage purposes.","KP","Korea (Democratic People's Republic of)",[23,24],"Government","Private sector",[26,27,28,29],"Ministry of Unification","Sejong Institute","Korea Institute for Defense Analyses","Germany",[31],"Espionage",[33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51],"https:\u002F\u002Fsecurelist.com\u002Fthe-kimsuky-operation-a-north-korean-apt\u002F57915\u002F","https:\u002F\u002Fwww.cfr.org\u002Finteractive\u002Fcyber-operations\u002Fkimsuky","https:\u002F\u002Fwww.pwc.co.uk\u002Fissues\u002Fcyber-security-data-privacy\u002Fresearch\u002Ftracking-kimsuky-north-korea-based-cyber-espionage-group-part-2.html","https:\u002F\u002Fyoutu.be\u002FhAsKp43AZmM?t=1027","https:\u002F\u002Fwww.bloomberglaw.com\u002Fdocument\u002Fpublic\u002Fsubdoc\u002FX67FPNDOUBV9VOPS35A4864BFIU?imagename=1","https:\u002F\u002Fwww.netscout.com\u002Fblog\u002Fasert\u002Fstolen-pencil-campaign-targets-academia","https:\u002F\u002Funit42.paloaltonetworks.com\u002Fnew-babyshark-malware-targets-u-s-national-security-think-tanks\u002F","https:\u002F\u002Fattack.mitre.org\u002Fgroups\u002FG0086\u002F","https:\u002F\u002Fus-cert.cisa.gov\u002Fncas\u002Falerts\u002Faa20-301a","https:\u002F\u002Fwww.cybereason.com\u002Fblog\u002Fback-to-the-future-inside-the-kimsuky-kgh-spyware-suite","https:\u002F\u002Fmandiant.widen.net\u002Fs\u002Fzvmfw5fnjs\u002Fapt43-report","https:\u002F\u002Fasec.ahnlab.com\u002Fen\u002F57873\u002F","https:\u002F\u002Fasec.ahnlab.com\u002Fen\u002F61082\u002F","https:\u002F\u002Fwww.rewterz.com\u002Frewterz-news\u002Frewterz-threat-alert-north-korean-apt-kimsuky-aka-black-banshee-active-iocs-29\u002F","https:\u002F\u002Fwww.sentinelone.com\u002Flabs\u002Fa-glimpse-into-future-scarcruft-campaigns-attackers-gather-strategic-intelligence-and-target-cybersecurity-professionals\u002F","https:\u002F\u002Fwww.bsi.bund.de\u002FDE\u002FThemen\u002FUnternehmen-und-Organisationen\u002FCyber-Sicherheitslage\u002FAnalysen-und-Prognosen\u002FThreat-Intelligence\u002FAktive_APT-Gruppen\u002Faktive-apt-gruppen_node.html","https:\u002F\u002Fctoatncsc.substack.com\u002Fp\u002Fcto-at-ncsc-summary-week-ending-may-16b","https:\u002F\u002Fsymantec-enterprise-blogs.security.com\u002Fblogs\u002Fthreat-intelligence\u002Fspringtail-kimsuky-backdoor-espionage","https:\u002F\u002Funit42.paloaltonetworks.com\u002Fkimsuky-new-keylogger-backdoor-variant\u002F",[53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180],"T1218","T1098","T1098.007","T1583","T1583.001","T1553","T1583.004","T1583.006","T1557","T1071","T1071.001","T1071.002","T1071.003","T1560","T1560.001","T1560.003","T1547","T1547.001","T1176","T1059","T1059.001","T1059.003","T1059.005","T1059.006","T1059.007","T1586","T1586.002","T1584","T1584.001","T1136","T1136.001","T1543","T1543.003","T1555","T1555.003","T1005","T1074","T1074.001","T1140","T1587","T1587.001","T1114","T1114.002","T1114.003","T1585","T1585.001","T1585.002","T1546","T1546.001","T1041","T1567","T1567.002","T1190","T1133","T1083","T1657","T1589","T1589.002","T1589.003","T1591","T1564","T1564.002","T1564.003","T1070","T1070.004","T1070.006","T1105","T1056","T1056.001","T1534","T1036","T1036.004","T1036.005","T1112","T1111","T1040","T1027","T1027.002","T1588","T1588.002","T1588.005","T1003","T1553.002","T1003.001","T1566","T1566.001","T1566.002","T1598","T1598.003","T1057","T1055","T1055.012","T1012","T1620","T1219","T1021","T1021.001","T1053","T1053.005","T1593","T1593.001","T1593.002","T1594","T1505","T1505.003","T1518","T1518.001","T1608","T1608.001","T1218.005","T1218.010","T1218.011","T1082","T1016","T1007","T1552","T1552.001","T1550","T1550.002","T1204","T1204.001","T1204.002","T1078","T1078.003","T1102","T1102.002","T1685","T1686",128,"2023-08-09T17:25:09.409843+00:00",{"title":184,"metaDescription":185,"keywords":186},"Kimsuky Threat Actor Profile | EdgeProtect","This threat actor targets South Korean think tanks, industry, nuclear power operators, and the Ministry of Unification for espionage purposes....","Kimsuky, Velvet Chollima, Black Banshee, Thallium, Operation Stolen Pencil, G0086, APT43, Emerald Sleet, THALLIUM, Springtail, Sparkling Pisces, threat actor, APT, cyber threat, threat intelligence, Government, Private sector, Korea (Democratic People's Republic of), KP",{"@context":188,"@type":189,"name":6,"alternateName":190,"description":19,"url":191,"mainEntityOfPage":192,"location":194},"https:\u002F\u002Fschema.org","Organization",[9,10,11,12,13,14,15,16,17,18],"https:\u002F\u002Fdev.precursorintelligence.com\u002Fthreat-actors\u002Fkimsuky",{"@type":193,"@id":191},"WebPage",{"@type":195,"name":20},"Country"]