Earth Kumiho - DPRK Threat Actor | lazarus.day

Earth Kumiho

2022-05-10 • Trend Micro • 国内標的型攻撃分析レポート2022年版を発表 | トレンドマイクロ

42

Related Actors
3

Related Reports

Related Actors

APT-C-55

Qihoo360

Kimsuky

First seen: Nov 2021

Last seen: May 2026

Black Banshee

PWC

Kimsuky

First seen: Feb 2020

Last seen: May 2026

TAG-46

Recorded Future

Kimsuky

First seen: Jan 2024

Last seen: Jan 2024

TAG-66

Recorded Future

Kimsuky

First seen: Jan 2024

Last seen: Jan 2024

KTA082

Kroll

Kimsuky

First seen: Mar 2024

Last seen: Mar 2024

Cerium

Microsoft

Kimsuky

First seen: Oct 2021

Last seen: Nov 2022

UNC1873

Mandiant

APT43

First seen: Mar 2023

Last seen: Mar 2023

Springtail

Symantec

Kimsuky

First seen: Mar 2024

Last seen: May 2026

G0094

MITRE

Kimsuky

First seen: Aug 2019

Last seen: Aug 2019

NNPTGroup

Self Given

Kimsuky

First seen: Apr 2015

Last seen: Apr 2015

Whoam I

Self Given

NNPTGroup

First seen: Apr 2015

Last seen: Apr 2015

Kimsuky

Kaspersky

First seen: Sep 2013

Last seen: Jun 2026

Phisherman

KRCERT

Kimsuky

UAT-5394

Cisco Talos

Kimsuky

First seen: Aug 2024

Last seen: Sep 2024

Sharp Tongue

Volexity

Kimsuky

First seen: Jul 2022

Last seen: Oct 2023

Sparkling Pisces

Paloalto Networks

Kimsuky

First seen: Sep 2024

Last seen: May 2026

TA408

Proofpoint

Kimsuky

First seen: Nov 2021

Last seen: Nov 2021

TA427

Proofpoint

Kimsuky

First seen: Nov 2021

Last seen: Jul 2025

Thallium

Microsoft

Kimsuky

First seen: Dec 2019

Last seen: Feb 2022

Seedpu NK

S2W

Kimsuky

First seen: Oct 2024

Last seen: Oct 2024

Dark Plum

NTTSecurity

Kimsuky

First seen: Oct 2024

Last seen: Apr 2025

Red Kim

KRCERT

Kimsuky

Larva-24005

Ahnlab

Kimsuky

First seen: Feb 2025

Last seen: Apr 2025

pu NK-004

S2W

Kimsuky

First seen: Mar 2025

Last seen: Mar 2025

Sector A05

NSHC

Kimsuky

First seen: Jan 2019

Last seen: Jul 2025

Larva-25004

Ahnlab

Kimsuky

First seen: May 2025

Last seen: Nov 2025

UNC1130

Mandiant

Kimsuky

First seen: Aug 2022

Last seen: Aug 2022

Velvet Chollima

Crowd Strike

Kimsuky

First seen: Feb 2019

Last seen: May 2026

RGB-D5

Issuemakers Lab

Kimsuky

First seen: Apr 2020

Last seen: Dec 2020

Larva-25010

Ahnlab

Kimsuky

First seen: Oct 2025

Last seen: Oct 2025

APT-Q-2

Qianxin

Kimsuky

First seen: Mar 2022

Last seen: Jun 2025

Nickel Kimball

Secure Works

Kimsuky

First seen: May 2022

Last seen: Oct 2024

APT43

Mandiant

Kimsuky

First seen: Mar 2023

Last seen: May 2026

ARCHIPELAGO

Google

APT43

First seen: Apr 2023

Last seen: Apr 2023

Pathetic Slug

Cloudflare

Kimsuky

First seen: Mar 2026

Last seen: Mar 2026

Ruby Sleet

Microsoft

Cerium

First seen: Apr 2023

Last seen: May 2026

Emerald Sleet

Microsoft

Thallium

First seen: Apr 2023

Last seen: Mar 2026

UNC3782

Mandiant

APT43

First seen: Apr 2023

Last seen: Nov 2025

UNC4469

Mandiant

APT43

First seen: Apr 2023

Last seen: Apr 2023

ITG16

IBM

Kimsuky

First seen: Mar 2024

Last seen: Mar 2024

Cloud Dragon

Team T5

Kimsuky

First seen: May 2021

Last seen: May 2023

Kim Dragon

Team T5

Kimsuky

First seen: May 2021

Last seen: May 2021

Related Reports

Top Authors

View all reports in this cluster

2026-04-16

Trend Micro

2025 APT Report: Staying Ahead of the Modern Threat Landscape

#EarthImp #EarthKumiho #EarthManticore #Trend #VoidDokkaebi

2025-03-18

Trend Micro

ZDI-CAN-25373 Windows Shortcut Exploit Abused as Zero-Day in Widespread APT Campaigns

#EarthImp #EarthKumiho #EarthManticore #LNK #VoidImugi

2022-05-10

Trend Micro

国内標的型攻撃分析レポート2022年版を発表 | トレンドマイクロ

#EarthKumiho

View all reports in this cluster