KEYMARBLE is a Trojan that has reportedly been used by the North Korean government. - <https://attack.mitre.org/software/S0271/>

KGH_SPY is a modular suite of tools used by Kimsuky for reconnaissance, information stealing, and backdoor capabilities. KGH_SPY derived its name from PDB paths and internal names found in samples containing "KGH". - <https://attack.mitre.org/software/S0526/>