Kimsuky is a North Korean state-backed hacker group and advanced persistent threat that targets South Korean think tanks, industry, nuclear power operators, and the South Korean Ministry of Unification for espionage purposes. From Wikipedia
Researchers link the July spear-phishing to Kimsuky based on prompt‑engineered deepfake IDs.
