What other aliases and vendor names is Kimsuky known by?

Kimsuky is tracked across the cybersecurity industry by multiple aliases, including: APT43, ARCHIPELAGO, Black Banshee, Crooked Pisces, Earth Kumiho, Emerald Sleet, G0086, G0094.

What vulnerabilities and CVEs does Kimsuky actively exploit?

Kimsuky has been observed weaponizing vulnerabilities including CVE-2024-1708, CVE-2024-1709.

Kimsuky

Q: What are the primary motivations and sponsors of Kimsuky?

Kimsuky operates from North Korea with primary motivation categorized as Strategic espionage (nuclear policy, national security, sanctions) and financial gain to support regime objectives, sponsored or affiliated with Democratic People's Republic of Korea (DPRK) / Reconnaissance General Bureau (RGB).

ACTIVE CAMPAIGN TRACKED ▲ High Threat North Korea

Primary Aliases: APT43 Emerald Sleet Opal Sleet Velvet Chollima

Sponsor / State Affiliation Democratic People's Republic of Korea (DPRK) / Reconnaissance General Bureau (RGB)

Primary Motivation Strategic espionage (nuclear policy, national security, sanctions) and financial gain to support regime objectives

Active Timeline Unknown – Present

Confidence Rating 95% (Grounded)

Operation GitPower, South Korean Software Vendor Supply Chain Campaign, Coordinated Embassy Hunt

⚔️ Weaponized CVE Matrix (2)

CVE-2024-1708

Weaponized Vulnerability

CVSS 8.5 KEV EPSS 85.0%

CVE-2024-1709

Weaponized Vulnerability

CVSS 8.5 KEV EPSS 85.0%

🎯 Target Sectors & Focus

Government agencies Diplomatic missions Think tanks Academic institutions News media organizations Collaborative-work software vendors (Supply Chain) Nuclear power operators Cryptocurrency and Finance sectors