Keep updated
Get in touch
| Type | Organization | [sources] | |||
|---|---|---|---|---|---|
| Name | Kimsuky Group · VELVET CHOLLIMA | [sources] | |||
| Alias | APT 43 · Sharptongue · Velvet Chollima | [sources] | |||
| Weak alias | APT43 · Archipelago · Black Banshee · Emerald Sleet · KIMSUKY · | [sources] | |||
| Legal form | not available | [sources] | |||
| Country | North Korea | [sources] | |||
| Description | North Korean cybercrime group controlled by the Reconnaissance General Bureau (RGB; KPe.031). | [sources] | |||
| bing2020@outlook.kr · donghyunkim1010@gmail.com · ds1kde@daum.net · ds1kdie@aol.com · haris2022100@outlook.com · | [sources] | ||||
| Unique Entity ID | YQSJWH9HUB57 | [sources] | |||
| Website | bookstarrtion.online · cdredos.site · janskinmn.lol · mofa.lat · onerearth.xyz · | [sources] | |||
| Status | not available | [sources] | |||
| Address | Democratic People's Republic of Korea · Korea, North | [sources] | |||
| Source link | sanctionssearch.ofac.treas.gov | [sources] | |||
| Last change | Last processed | First seen | |||
In Annex 98 (p. 568) of the UN Panel of Experts March 2024 report, the Panel released a list of websites associated with Kimsuky. Please proceed with caution as the following URLs might be linked to cybercrime activities and the distribution of malware: sovershopp[.]online; onerearth[.]xyz; mofa[.]lat; janskinmn[.]lol; supermeasn[.]lat; bookstarrtion[.]online; cdredos[.]site; scemsal[.]site; somelmark[.]store
The primary United States' sanctions list, specially designated nationals (SDN) part.
United States · OFAC
The Consolidated Screening List (CSL) is a list of parties for which the United States Government maintains restrictions on certain exports, re-exports, or transfers of items.
United States · ITA
Entities subject to export restrictions due to concerns about the end-use or end-users, particularly relating to weapons of mass destruction (WMD) or other military applications.
Taiwan · MOEA
The Consolidated List is a list of all persons and entities who are subject to targeted financial sanctions under Australian sanctions law
Australia · DFAT
A database of entities and events related to North Korea's sanctions evasion efforts.
United Kingdom · RUSI · non-official source
A database of suppliers who have been excluded from participating in US federal procurement.
United States · GSA
kprusi-55899c967460f56ceed31013564e1a7e04413779 · au-dfat-8385-kimsuky · usgsa-s4mrrj1lf · tw-shtc-66af7b04e6667414c8c6694aad4febbd202910cd · ofac-45430For experts: raw data explorer
OpenSanctions is free for non-commercial users. Businesses must acquire a data license to use the dataset.
| Address | ||
|---|---|---|
| Full address | Country | |
| Democratic People's Republic of Korea | North Korea | |
| Linked to | ||||
|---|---|---|---|---|
| Object | Role | Start date | End date | |
| 63 Research Center of the Reconnaissance General Bureau | Kimsuky Group is working with or on behalf of the 63 Research Center | - | - | |
| Australia | Department of Foreign Affairs and Trade | Democratic People's Republic Of Korea (North Korea) Sanctions Regime | - |
| United States | Office of Foreign Assets Control | North Korea Sanctions | - | - |
| ARCHIPELAGO | ARCHIPELAGO is a subset of APT 43 (alias of Kimsuky Group) | - | - |
| Reconnaissance General Bureau Export controlled · Sanctioned entity | The Reconnaissance General Bureau oversees all North Korean cybercrime activities, Kimsuky group included | - | - |
| Third Bureau of the Reconnaissance General Bureau | Kimsuky Group is reported to be included in the Third Bureau of the Reconnaissance General Bureau | - | - |
| TA427 | Associated | - | - |