Threat Intelligence / Actor / Kimsuky (Velvet Chollima)

Kimsuky (Velvet Chollima)

Nation: North Korea · 1 tracked threat(s) · Categories: MALWARE

Also known as: Velvet Chollima, APT43, Ruby Sleet, Black Banshee, Sparkling Pisces, Springtail, Cerium

Tracked threats

Kimsuky (Velvet Chollima) PebbleDash Cluster — HelloDoor, httpMalice, httpTroy/MemLoad & VS Code Remote Tunnel Abuse Against South Korea — HIGH

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence