UNC4469 - DPRK Threat Actor | lazarus.day

UNC4469

2023-04-20 • Mandiant • 3CX Software Supply Chain Compromise Initiated by…

42

Related Actors
1

Related Reports

Related Actors

APT-C-55

Qihoo360

Kimsuky

First seen: Nov 2021

Last seen: May 2026

Black Banshee

PWC

Kimsuky

First seen: Feb 2020

Last seen: May 2026

TAG-46

Recorded Future

Kimsuky

First seen: Jan 2024

Last seen: Jan 2024

TAG-66

Recorded Future

Kimsuky

First seen: Jan 2024

Last seen: Jan 2024

KTA082

Kroll

Kimsuky

First seen: Mar 2024

Last seen: Mar 2024

Cerium

Microsoft

Kimsuky

First seen: Oct 2021

Last seen: Nov 2022

UNC1873

Mandiant

APT43

First seen: Mar 2023

Last seen: Mar 2023

Springtail

Symantec

Kimsuky

First seen: Mar 2024

Last seen: May 2026

G0094

MITRE

Kimsuky

First seen: Aug 2019

Last seen: Aug 2019

NNPTGroup

Self Given

Kimsuky

First seen: Apr 2015

Last seen: Apr 2015

Whoam I

Self Given

NNPTGroup

First seen: Apr 2015

Last seen: Apr 2015

Kimsuky

Kaspersky

First seen: Sep 2013

Last seen: Jun 2026

Phisherman

KRCERT

Kimsuky

UAT-5394

Cisco Talos

Kimsuky

First seen: Aug 2024

Last seen: Sep 2024

Sharp Tongue

Volexity

Kimsuky

First seen: Jul 2022

Last seen: Oct 2023

Sparkling Pisces

Paloalto Networks

Kimsuky

First seen: Sep 2024

Last seen: May 2026

TA408

Proofpoint

Kimsuky

First seen: Nov 2021

Last seen: Nov 2021

TA427

Proofpoint

Kimsuky

First seen: Nov 2021

Last seen: Jul 2025

Thallium

Microsoft

Kimsuky

First seen: Dec 2019

Last seen: Feb 2022

Seedpu NK

S2W

Kimsuky

First seen: Oct 2024

Last seen: Oct 2024

Dark Plum

NTTSecurity

Kimsuky

First seen: Oct 2024

Last seen: Apr 2025

Red Kim

KRCERT

Kimsuky

Larva-24005

Ahnlab

Kimsuky

First seen: Feb 2025

Last seen: Apr 2025

pu NK-004

S2W

Kimsuky

First seen: Mar 2025

Last seen: Mar 2025

Earth Kumiho

Trend Micro

Kimsuky

First seen: May 2022

Last seen: Apr 2026

Sector A05

NSHC

Kimsuky

First seen: Jan 2019

Last seen: Jul 2025

Larva-25004

Ahnlab

Kimsuky

First seen: May 2025

Last seen: Nov 2025

UNC1130

Mandiant

Kimsuky

First seen: Aug 2022

Last seen: Aug 2022

Velvet Chollima

Crowd Strike

Kimsuky

First seen: Feb 2019

Last seen: May 2026

RGB-D5

Issuemakers Lab

Kimsuky

First seen: Apr 2020

Last seen: Dec 2020

Larva-25010

Ahnlab

Kimsuky

First seen: Oct 2025

Last seen: Oct 2025

APT-Q-2

Qianxin

Kimsuky

First seen: Mar 2022

Last seen: Jun 2025

Nickel Kimball

Secure Works

Kimsuky

First seen: May 2022

Last seen: Oct 2024

APT43

Mandiant

Kimsuky

First seen: Mar 2023

Last seen: May 2026

ARCHIPELAGO

Google

APT43

First seen: Apr 2023

Last seen: Apr 2023

Pathetic Slug

Cloudflare

Kimsuky

First seen: Mar 2026

Last seen: Mar 2026

Ruby Sleet

Microsoft

Cerium

First seen: Apr 2023

Last seen: May 2026

Emerald Sleet

Microsoft

Thallium

First seen: Apr 2023

Last seen: Mar 2026

UNC3782

Mandiant

APT43

First seen: Apr 2023

Last seen: Nov 2025

ITG16

IBM

Kimsuky

First seen: Mar 2024

Last seen: Mar 2024

Cloud Dragon

Team T5

Kimsuky

First seen: May 2021

Last seen: May 2023

Kim Dragon

Team T5

Kimsuky

First seen: May 2021

Last seen: May 2021

Related Reports

Top Authors

View all reports in this cluster

2023-04-20

Mandiant

3CX Software Supply Chain Compromise Initiated by a Prior Software Supply Chain Compromise; Suspected North Korean Actor Responsible

#SupplyChain #UNC4736 #YARA #3CXDesktopApp #SmoothOperator #X_Trader #UNC4469 #UNC3782 #T1573 #T1190 #T1608 #T1036 #T1012 #T1588.004 #T1027 #T1622 #T1071 #T1565.001 #T1082 #T1574 #T1614 #T1614.001 #T1620 #T1140 #T1608.003 #T1070.004 #T1036.001 #T1195 #T1071.004 #T1070.001 #T1105 #T1071.001 #T1195.002 #T1588 #T1055 #T1574.002 #T1070 #T1112 #T1083 #T1565 #T1497 #T1573.002 #T1497.001

View all reports in this cluster