Kimsuky Trend 2026

Kimsuky is a state-sponsored North Korean advanced persistent threat group, active since 2012. It conducts cyberespionage against think tanks, government entities, and research institutions in South Korea, the U.S., and Europe. Using spear-phishing, malware, and credential theft, it gathers geopolitical intelligence for the North Korean regime. Its primary beneficiary is the DPRK government, which leverages stolen data for strategic military and diplomatic advantage.