Affiliations
- Also known as APT 43
This threat actor targets South Korean think tanks, industry, nuclear power operators, and the Ministry of Unification for espionage purposes. Also responsible for launching a launching a spear-phishing campaign targeting UN officials, including those affiliated with the UN Security Council.
Suspected victims
- Ministry of Unification
- UN officials, including those affiliated with the UN Security Council
- Sejong Institute
- Korea Institute for Defense Analyses
Suspected state sponsor
- Korea (Democratic People's Republic of)
Type of incident
- Espionage
Target category
- Government
- Private sector