Dark Plum - DPRK Threat Actor | lazarus.day

Dark Plum

2024-10-03 • NTTSecurity • Unmasking DarkPlum: inside the operations of DPRK…

42

Related Actors
3

Related Reports

Related Actors

APT-C-55

Qihoo360

Kimsuky

First seen: Nov 2021

Last seen: May 2026

Black Banshee

PWC

Kimsuky

First seen: Feb 2020

Last seen: May 2026

TAG-46

Recorded Future

Kimsuky

First seen: Jan 2024

Last seen: Jan 2024

TAG-66

Recorded Future

Kimsuky

First seen: Jan 2024

Last seen: Jan 2024

KTA082

Kroll

Kimsuky

First seen: Mar 2024

Last seen: Mar 2024

Cerium

Microsoft

Kimsuky

First seen: Oct 2021

Last seen: Nov 2022

UNC1873

Mandiant

APT43

First seen: Mar 2023

Last seen: Mar 2023

Springtail

Symantec

Kimsuky

First seen: Mar 2024

Last seen: May 2026

G0094

MITRE

Kimsuky

First seen: Aug 2019

Last seen: Aug 2019

NNPTGroup

Self Given

Kimsuky

First seen: Apr 2015

Last seen: Apr 2015

Whoam I

Self Given

NNPTGroup

First seen: Apr 2015

Last seen: Apr 2015

Kimsuky

Kaspersky

First seen: Sep 2013

Last seen: Jun 2026

Phisherman

KRCERT

Kimsuky

UAT-5394

Cisco Talos

Kimsuky

First seen: Aug 2024

Last seen: Sep 2024

Sharp Tongue

Volexity

Kimsuky

First seen: Jul 2022

Last seen: Oct 2023

Sparkling Pisces

Paloalto Networks

Kimsuky

First seen: Sep 2024

Last seen: May 2026

TA408

Proofpoint

Kimsuky

First seen: Nov 2021

Last seen: Nov 2021

TA427

Proofpoint

Kimsuky

First seen: Nov 2021

Last seen: Jul 2025

Thallium

Microsoft

Kimsuky

First seen: Dec 2019

Last seen: Feb 2022

Seedpu NK

S2W

Kimsuky

First seen: Oct 2024

Last seen: Oct 2024

Red Kim

KRCERT

Kimsuky

Larva-24005

Ahnlab

Kimsuky

First seen: Feb 2025

Last seen: Apr 2025

pu NK-004

S2W

Kimsuky

First seen: Mar 2025

Last seen: Mar 2025

Earth Kumiho

Trend Micro

Kimsuky

First seen: May 2022

Last seen: Apr 2026

Sector A05

NSHC

Kimsuky

First seen: Jan 2019

Last seen: Jul 2025

Larva-25004

Ahnlab

Kimsuky

First seen: May 2025

Last seen: Nov 2025

UNC1130

Mandiant

Kimsuky

First seen: Aug 2022

Last seen: Aug 2022

Velvet Chollima

Crowd Strike

Kimsuky

First seen: Feb 2019

Last seen: May 2026

RGB-D5

Issuemakers Lab

Kimsuky

First seen: Apr 2020

Last seen: Dec 2020

Larva-25010

Ahnlab

Kimsuky

First seen: Oct 2025

Last seen: Oct 2025

APT-Q-2

Qianxin

Kimsuky

First seen: Mar 2022

Last seen: Jun 2025

Nickel Kimball

Secure Works

Kimsuky

First seen: May 2022

Last seen: Oct 2024

APT43

Mandiant

Kimsuky

First seen: Mar 2023

Last seen: May 2026

ARCHIPELAGO

Google

APT43

First seen: Apr 2023

Last seen: Apr 2023

Pathetic Slug

Cloudflare

Kimsuky

First seen: Mar 2026

Last seen: Mar 2026

Ruby Sleet

Microsoft

Cerium

First seen: Apr 2023

Last seen: May 2026

Emerald Sleet

Microsoft

Thallium

First seen: Apr 2023

Last seen: Mar 2026

UNC3782

Mandiant

APT43

First seen: Apr 2023

Last seen: Nov 2025

UNC4469

Mandiant

APT43

First seen: Apr 2023

Last seen: Apr 2023

ITG16

IBM

Kimsuky

First seen: Mar 2024

Last seen: Mar 2024

Cloud Dragon

Team T5

Kimsuky

First seen: May 2021

Last seen: May 2023

Kim Dragon

Team T5

Kimsuky

First seen: May 2021

Last seen: May 2021

Related Reports

Top Authors

View all reports in this cluster

2025-04-01

NTTSecurity

ホワイトペーパー「悪性MSC解析レポート」を公開しました

#DarkPlum #MSC

2024-11-19

NTTSecurity

標的型攻撃グループDarkPlumが使用するAsyncRATの亜種について

#AsyncRAT #DarkPlum

2024-10-03

NTTSecurity

Unmasking DarkPlum: inside the operations of DPRK's elite cyber espionage group

#DarkPlum #Kimsuky #APT43 #Espionage #Phishing #Cryptocurrency #Government #Defense

View all reports in this cluster