Would your experts see through Kimsuky's next friendly email?
A threat group attributed to North Korea, active since at least 2012. It targets governments, think tanks and experts on Korea and foreign policy, often posing as journalists or researchers to win trust.
Kimsuky
- Origin
- North Korea · State-sponsored
- Also known as
- Velvet Chollima, Emerald Sleet
- Lure
- Spearphishing How they get in
- Weapon
- Backdoors Their signature move
- Loot
- Secrets What they are after
- MITRE ATT&CK®
- Kimsuky (G0094)
Try an exercise against this group
In an exercise against a group like this one, your team meets techniques like those documented for it, in the order a real attack would take. Afterwards the report shows where the attack was stopped.
Book a demo See all threat cards
The cards describe publicly known threat groups. They say nothing about who those groups target. © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation. MITRE ATT&CK® is a registered trademark of The MITRE Corporation.