{
  "id": "kimsuky",
  "name": "Kimsuky",
  "aliases": [
    "APT43",
    "Velvet Chollima",
    "Emerald Sleet",
    "THALLIUM",
    "Black Banshee"
  ],
  "domain": "cyber",
  "country": "PRK",
  "category": "State-sponsored cyber threat group",
  "status": "active",
  "fielded": null,
  "operators": [
    "PRK"
  ],
  "summary": "DPRK-based cyber espionage group collecting on foreign policy and national security issues tied to the Korean Peninsula, nuclear policy and sanctions. Since 2023 it has used commercial large language models to support reconnaissance and social engineering.",
  "specs": [
    {
      "k": "sponsor",
      "v": "Democratic People's Republic of Korea (DPRK)",
      "src": [
        "mitre-g0094"
      ],
      "conf": "medium"
    },
    {
      "k": "active_since",
      "v": 2012,
      "src": [
        "mitre-g0094"
      ],
      "conf": "medium",
      "note": "At least 2012"
    },
    {
      "k": "attack_id",
      "v": "G0094",
      "src": [
        "mitre-g0094"
      ],
      "conf": "high"
    },
    {
      "k": "targets",
      "v": "South Korean government agencies and think tanks, the United Nations, organizations in the U.S., Japan, Russia and Europe",
      "src": [
        "mitre-g0094"
      ],
      "conf": "medium"
    },
    {
      "k": "campaigns",
      "v": "Operation STOLEN PENCIL (2018); Operation Kabar Cobra (2019); Operation Smoke Screen (2019)",
      "src": [
        "mitre-g0094"
      ],
      "conf": "medium"
    }
  ],
  "payloads": [],
  "variants": [],
  "art": "cyber",
  "image": null,
  "verified": null,
  "changelog": [
    {
      "date": "2026-10-05",
      "change": "Entry created from MITRE ATT&CK (group page version 5.2)"
    }
  ],
  "url": "https://www.defensepedia.com/systems/kimsuky.html",
  "sources": {
    "mitre-g0094": {
      "title": "Kimsuky, Group G0094",
      "publisher": "MITRE ATT&CK",
      "url": "https://attack.mitre.org/groups/G0094/",
      "published": "2026-07-31",
      "tier": 2,
      "checked": "2026-10-05"
    }
  }
}