At a Glance Actor or Group Kimsuky (suspected North Korean state-sponsored group, also tracked as TA406 and APT43) Activity Type Spear-phishing, living-off-the-land AnyDesk staging, GitHub Pages hosting, and credential harvesting Targets or Victims Ukrainian diplomatic and defense specialists, South Korean citizens, and German commercial targets Scale

At a glance Actor Kimsuky, a North Korea-linked threat group (assessed by Genians) Activity Reply-baiting spear phishing, malicious LNK files, fake Zoom installer, credential phishing Targets Ukrainian experts in diplomacy, security, and international policy Scale Several individual targets; Genians says most attempts failed Status No law-enforcement action reported Source