2023-03-20-sicherheitshinweis-cyberaktivitaeten-englisch.pdf (1 MB)

Germany’s BfV and South Korea’s NIS issued a joint cybersecurity notice on Kimsuky cyber-espionage activity. The German source says Kimsuky, also known as Velvet Chollima or Thallium, steals information worldwide through cyberattacks, including foreign-ministry strategy papers and research or expert documents. It identifies academic, diplomatic, NGO, and think-tank targets as part of the group’s target set and notes that German institutions and research organizations should apply protective measures. The excerpt does not provide malware or IOC detail, so the summary is limited to the advisory’s attribution and victimology.