Kimsuky: Infamous Threat Actor Churns Out More Advanced Malware

Authors: Nico Chiaravio & Gianluca Braga

The Hacker News recently published a story that discusses a joint communication among the German intelligence apparatus, the Federal Office for the Protection of the Constitution (BfV), and South Korea’s National Intelligence Service (NIS), warning readers about new tactics used by a North Korean threat actor called Kimsuky.

This actor, also known by Thalium and APT37, has been active since 2012 and has produced several campaigns using various techniques, from watering hole attacks to …

actor advanced advanced malware amp android apt37 attacks authors bfv called campaigns communication constitution federal german hacker intelligence intelligence service kimsuky korea malware national nis north north korean office phishing platforms protection service south south korea spear phishing story tactics targeting techniques threat threat actor warning watering hole