Operation Kabar Cobra is a cyber espionage campaign attributed to the North Korean state-sponsored Kimsuky APT group, first publicly identified in late 2018 and early 2019. The campaign was named by AhnLab researchers due to the presence of a specific mutex named 'KABAR' and a malware file name 'Cobra' observed in attacks. Initially focused on South Korean government, defense, and media entities, the group's activities expanded to include financial firms and cryptocurrency organizations, indicating a dual motivation for political intelligence gathering and financial gain. This specific operation is characterized by its use of spear-phishing attacks tailored to South Korean targets, employing localized file formats and social engineering tactics.

Aliases del actor

APT SECTORA05

Actores similares

apt-sectora05actor · 1apt-45actor · 2apt-c-27actor · 2apt-c-01actor · 2apt-c-12actor · 1apt-18actor · 1apt-1877teamactor · 1apt-27actor · 1apt-30actor · 1apt-38actor · 1