Nex Systems
Organization

Kimsuky

Sanctioned entity

North Korea. Named in 4 sanctions listings.

Screen this subject

Summary

North Korean cybercrime group controlled by the Reconnaissance General Bureau (RGB; KPe.031).

DPRK cyberthreat actor.

In Annex 98 (p. 568) of the UN Panel of Experts March 2024 report, the Panel released a list of websites associated with Kimsuky. Please proceed with caution as the following URLs might be linked to cybercrime activities and the distribution of malware: sovershopp[.]online; onerearth[.]xyz; mofa[.]lat; janskinmn[.]lol; supermeasn[.]lat; bookstarrtion[.]online; cdredos[.]site; scemsal[.]site; somelmark[.]store

Sanctions and listings4

  • Effective
    1 Dec 2023

    国際平和のための国際的な努力に我が国として寄与するために講ずる資産凍結等の措置の対象となる

    Ministry of FinanceJapan Economic Sanctions and List of Eligible PeopleJapan

    Reference 75mof.go.jp

  • Democratic People's Republic Of Korea (North Korea) Sanctions Regime - Autonomous (DPRK)

    Department of Foreign Affairs and TradeAustralian Sanctions Consolidated ListAustralia

    Targeted financial sanction

    Autonomous Sanctions (Designated Persons and Entities and Declared Persons – Democratic People’s Republic of Korea) Amendment (No. 1) Instrument 2025

    Autonomous Sanctions (Designated Persons and Entities and Declared Persons – Democratic People’s Republic of Korea) List 2012

    Programme AU-DPRKLast updated 6 Nov 2025dfat.gov.audfat.gov.au

  • Listed
    4 Dec 2023
    Effective
    30 Nov 2023

    Reciprocal

    OFACUS SAM Procurement ExclusionsUnited StatesActive

    Prohibition/Restriction

    Redacted for Security Reasons

    sam.gov

  • Listed
    30 Nov 2023

    North Korea Sanctions - DPRK2

    Office of Foreign Assets ControlUS OFAC Specially Designated Nationals (SDN) ListUnited States

    Block and DPRK2

    Secondary sanctions risk: North Korea Sanctions Regulations, sections 510.201 and 510.210

    Transactions Prohibited For Persons Owned or Controlled By U.S. Financial Institutions: North Korea Sanctions Regulations section 510.214

    Executive Order 13687 (North Korea)

    Programme US-NKReference 45430treasury.govofac.treasury.gov

Connections8

Other links8

  • OrganizationReconnaissance General BureauSanctionedDebarredExport controlled
    Linked from
    "The Reconnaissance General Bureau oversees all North Korean cybercrime activities"North Korea
  • OrganizationUNC 4899
    Linked from
    "The entities have "overlaps""North Korea
  • OrganizationTECHNICAL RECONNAISSANCE BUREAUSanctionedDebarredExport controlled
    Linked from
    "Kimsuky Group is reported to be included in the Third Bureau of the Reconnaissance General Bureau"North Korea
  • OrganizationTA427
    Linked from
    "Associated"
  • OrganizationTA406
    Linked from
    "Associated"
  • OrganizationARCHIPELAGO
    Linked from
    "ARCHIPELAGO is a subset of APT 43 (alias of Kimsuky Group)"North Korea

Other names11

Also known as4

SharptongueAPT 43キムスキーKimsuky Group

Weak aliases7

Spellings the source flags as too generic to establish a match on their own.

APT43Black BansheeVelvet ChollimaArchipelagoNickel KimballThalliumEmerald Sleet

Addresses2

  • Korea, North

  • Democratic People's Republic of Korea

This page shows the public record as its publishers state it. A name here is not by itself a finding: whether a record refers to a particular person or company is what screening decides. Read the full notice.