North Korea's AI-Enhanced Cyber Espionage Campaign

Kuzey Koreli Hackerlar Yapay Zeka Araçları Geliştiriyor

No separate article for this desk or language yet.

The US Treasury Department sanctioned Kimsuky as a North Korean state-linked cyber espionage group.

In 2023, the US Treasury Department added Kimsuky to its sanctions list, designating the group as a cyber espionage operation under North Korean government control.

According to US authorities, intelligence collected by Kimsuky supports Pyongyang's strategic goals and military programs. The group has long been associated with North Korea-linked cyber operations and has targeted government agencies, think tanks, academics, diplomatic missions, and security experts.

Around the time of the sanction, Kimsuky's recent operations had focused on military and security institutions as well as the virtual asset and finance sectors.

Kimsuky has long targeted government agencies, think tanks, academics, and security experts with spear-phishing campaigns.

Kimsuky, a hacking group associated with North Korea, has long targeted government agencies, think tanks, academics, diplomatic missions, and security experts with spear-phishing campaigns.

These attacks often begin with a ZIP file containing a shortcut disguised as an official document, research report, meeting document, payment request, media article, or diplomatic correspondence. Opening it triggers PowerShell-based malicious code, allowing the attackers to compromise the target.