Kimsuky is a threat actor attributed to KP, also known as TA427, TA406, APT 43. This group is tracked in the Strobes VI threat intelligence database.

What vulnerabilities does Kimsuky exploit?

Kimsuky is known to exploit 6 CVEs. View the full list on the Strobes VI threat actor profile page.

Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives

PoC for every finding

30+ tools orchestrated

Book a Demo Learn More

Setup in 5 minutesSOC 2 & ISO 27001

Kimsuky

Also known as: TA427, TA406, APT 43, G0094, THALLIUM, SharpTongue, APT43, Velvet Chollima, Larva-24005, ITG16, Operation Stolen Pencil, Larva-25004, Emerald Sleet, ARCHIPELAGO, Black Banshee, Springtail, KTA082, Sparkling Pisces, Kimsuky, Thallium, G0086, UAT-5394

KPInformation theft and espionage

Exploited CVEs

Overview

This threat actor targets South Korean think tanks, industry, nuclear power operators, and the Ministry of Unification for espionage purposes.

Exploited Vulnerabilities

CVE ID	Action
CVE-2014-7169	View Details