North Korea getting sanctioned again

The group talked about here I don’t think we’ve heard of, but they’re part of an intelligence collective as well as part of North Korea’s nuclear program.

While the article is heavily linked, it was definitely interesting. They’re known by various names Kimsuky, APT43, Emerald Sleet, Velvet Chollima, TA406 and Black Banshee.

Kimsuky’s operations in recent years have been widely exposed, analyzed and documented by various government and industry researchers. Nevertheless, “APT43 has demonstrated remarkable resilience, continuing to employ sophisticated social engineering tactics to target unsuspecting individuals and organizations,” Michael Barnhart, principal analyst at Mandiant, told CyberScoop in an email.

Kimsuky typically employs spearphishing to target key people in government, research centers, think tanks, academic institutions and news media organizations, according to the Treasury announcement.

For more, please read the full Cyberscoop article titled U.S. government sanctions prolific North Korean cyber espionage unit and be aware of it.