Kimsuky

Reported Context (39)

The article identifies Kimsuky as a North Korean state-sponsored APT group associated with intelligence collection and describes campaigns using spear-phishing, LNK files, and PowerShell. The analyzed log sample is a controlled emulation, not a live intrusion. Kimsuky-Style Tradecraft Mapped to Windows Logs in Controlled Emulation
Microsoft Threat Intelligence reports possible AI-created voice and video media by Emerald Sleet, while stating it has not determined the full operational impact. It assesses Emerald Sleet's AI adoption as expanding. Microsoft Details North Korean Threat Actors’ Expanding Use of AI
North Korea-aligned APT group whose use of QR codes in attacks prompted an FBI alert in January 2026. ESET H1 2026 Threat Report Finds Rising ClickFix, QR Phishing and Malicious AI Skills
North Korean state-sponsored group reported to have used generative AI to create deepfake job applicant profiles in 2025. Cisco’s 2026 AI Security Report Highlights Agentic and Supply Chain Risks
North Korea-linked actor ranked second with 8.45% of actor-linked alerts. The report explicitly identifies APT43 as an alternate name. Nozomi H2 2025 Report Highlights Credential Exposure and OT/IoT Security Gaps

CVE (44)

Malware (128)

People (25)

Threat Actors (114)

MITRE ATT&CK (119)

Vendors (66)

Products (174)

Tools (84)

Industries (58)

Countries (45)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.