What other aliases and vendor names is Stolen Pencil known by?

Stolen Pencil is tracked across the cybersecurity industry by multiple aliases, including: APT43, ARCHIPELAGO, Black Banshee, Crooked Pisces, Earth Kumiho, Emerald Sleet, G0086, G0094.

Stolen Pencil

Q: What are the primary motivations and sponsors of Stolen Pencil?

Stolen Pencil operates from North Korea with primary motivation categorized as Strategic cyber espionage to gather intelligence on foreign policy, national security, nuclear issues, and regional geopolitical shifts., sponsored or affiliated with Government of North Korea (DPRK).

ACTIVE CAMPAIGN TRACKED ▲ High Threat North Korea

Primary Aliases: APT43 Emerald Sleet Opal Sleet Velvet Chollima

Sponsor / State Affiliation Government of North Korea (DPRK)

Primary Motivation Strategic cyber espionage to gather intelligence on foreign policy, national security, nuclear issues, and regional geopolitical shifts.

Active Timeline Unknown – Present

Confidence Rating 95% (Grounded)

South Korean Policy Intelligence Gathering, U.S.-ROK Security Alliance Espionage