Tuesday, June 6, 2023

FBI & NSA Warn Think Tanks About North Korean Cyber Group Kimsuky

Here is more from the US State Department:

Today the U.S. Department of State, the Federal Bureau of Investigation, and the National Security Agency together with partners from the Republic of Korea Ministry of Foreign Affairs, National Police Agency, and National Intelligence Service are releasing a Cybersecurity Advisory  on social engineering and hacking threats posed by the DPRK cyber group known as Kimsuky. This Advisory is collaborative effort between our two governments and a concrete outcome of the U.S.-ROK Working Group on DPRK Cyber Threats.

Kimsuky, a set of DPRK cyber actors, conducts large-scale social engineering campaigns in which victims at think tanks, academic institutions, and news outlets are manipulated and compromised for the purpose of intelligence gathering.


Kimsuky has been targeting experts and think tanks for years, including those in the US, Japan, and South Korea working on nuclear issues and sanctions.

Update: SentinelLabs said that North Korean hackers had been impersonating journalists to gather intelligence from academics and think tanks.