Analysis governmentdefence
TA427 / Kimsuky: North Korea's Intelligence-Gathering APT
TA427 (Kimsuky, Emerald Sleet) is North Korea's primary intelligence collection arm — an APT operation that has run sustained espionage campaigns against nuclear policy researchers, think tanks, and government officials for over a decade. This deep dive covers their TTPs, evolving malware toolkit, social engineering tradecraft, and what defenders should watch for.