Threat actor
Kimsuky
Tracked by CyberSIXT since May 14, 2026 · last activity Jul 27, 2026
Coverage timeline
-
Kimsuky uses backdoors to hit South Korean groupware vendorssecurityonline.info · Jul 27, 2026
-
Kimsuky’s HttpSpy targets Korean military with fake meetingssecurityonline.info · Jun 3, 2026
-
Kimsuky deploys HTTPSpy malware, expands toolkit for espionagethehackernews.com · May 29, 2026
-
Kimsuky updates PebbleDash and AppleSeed with HelloDoor backdoorsecurelist.com · May 14, 2026