World · East Asia & Pacific · 1 hr ago
North Korean hackers target Ukrainian experts for wartime intelligence
North Korean hackers targeted Ukrainian experts in diplomacy, security and international policy, according to South Korean cybersecurity firm Genians.
The group, known as Kimsuky, used fake conference invitations and research requests to get targets to open malicious files or links.
The campaign comes as North Korea provides troops and other military support to Russia in its war against Ukraine.
Genians said the hackers may be seeking information about the war and North Korean troops, including losses and what captured soldiers might reveal; most observed attacks were unsuccessful.
The activity is part of a wider cyberespionage campaign called Operation GitPower, which uses platforms such as GitHub and GitLab to spread malicious files and communicate with compromised computers.
Researchers also found Japanese-language documents linked to the campaign, suggesting possible targeting of Japanese-speaking people, but no further action or timeline was given.
North Korean hacking group Kimsuky targeted Ukrainian experts in diplomacy, security and international policy, according to a report by South Korean cybersecurity firm Genians.
The group used fake conference invitations, research requests and malicious files to try to steal information.
Researchers said the campaign may seek intelligence about the war, North Korean troop losses, prisoners of war and consultations between South Korea and Ukraine.
Most of the observed attacks were unsuccessful, Genians said.
The activity is part of a broader cyberespionage campaign known as Operation GitPower.
- Who
- North Korean hacking group Kimsuky targeted Ukrainian experts.
- What
- The group used deceptive invitations, research requests and malicious files in an effort to steal information.
- When
- The campaign is ongoing; Genians described an attack in August. The sources do not state the year of that attack.
- Where
- The targets were Ukrainian experts; one fake invitation claimed to be for a cybersecurity conference in Seoul.
- Why
- Researchers said the attacks may seek information about the war, North Korean troop losses, prisoners of war and South Korea-Ukraine consultations.
This story does not have two clearly opposing sides.
Kimsuky has been active, targeting governments, think tanks, academics and media organizations.
North Korea has provided troops and other military support to Russia in its war in Ukraine.
Proofpoint reported that a North Korean-linked group was sending malicious emails to Ukrainian government agencies.
Kimsuky impersonated organizers of a cybersecurity conference in Seoul to invite a Ukrainian security expert.
Ukrainian forces transferred two captured North Korean soldiers to South Korea.
- Group
- Kimsuky
- Campaign
- Operation GitPower
- Target group
- Ukrainian experts in diplomacy, security and international policy
- Malicious platforms
- GitHub, GitLab and Codeberg
- Prisoner transfer
- Two North Korean soldiers were transferred to South Korea in September
What people are saying
Kimsuky’s attacks against Ukraine may be aimed at collecting information on the war, the extent of North Korean troop losses, developments in the questioning and handling of prisoners of war, and the details of consultations between South Korea and Ukraine
Sources
Related news
Eight people injured in stabbing at Incheon supermarket
Japan and US to review off-duty rules after Okinawa killing
Australia seeks to stop online broadcast of planned US execution
Fire at plastic recycling plant in Nara; workers escape unharmed
Trump says he may meet Kim Jong Un during Asia trip in November
Chinese courts sentence three Myanmar crime group leaders to death
Indonesia moves eight endangered orangutans to safety after Borneo fires
Wildfire destroys nearly 300 homes in Indonesia, forcing hundreds to flee
Bedbugs found on Qantas plane, forcing Rome-to-Perth flight cancellation
North Korea says tactical missile test upgraded a key weapons component
US strategists debate ending ambiguity over Taiwan
