Kimsuky deploys TRANSLATEXT to target South Korean academia

IntroductionIn March 2024, Zscaler ThreatLabz observed new activity from Kimsuky (aka APT43, Emerald Sleet, and Velvet Chollima), an advanced persistent threat actor backed by the North Korean government. This group, first observed in 2013, is notorious for cyber espionage, and financially motivated cyber attacks, primarily targeting South Korean entities, including think tanks, government institutions, and the academic sector. They employ various tactics, techniques, and procedures (TTPs) in their targeted campaigns and one of their distribution methods is malicious Google Chrome …

academia actor advanced advanced persistent threat apt43 attacks cyber cyber attacks cyber espionage entities espionage government kimsuky march north north korean persistent persistent threat sleet south target targeting think tanks threat threat actor threatlabz zscaler