RISI

← Back to database

Hyundai Merchant Marine Kimsuky APT attack

Event Year
2013
Reliability
Confirmed
Country
South Korea
Industry
Transportation
Attack Type
Targeted Attack

Description

Kaspersky's 2013 'Kimsuky operation' report documented a North Korean–attributed espionage campaign targeting South Korean think tanks and Hyundai Merchant Marine. The malware harvested HWP documents and used a Bulgarian email service for command-and-control routing.

Impact

Sensitive policy and shipping documents were exfiltrated. No operational impact on shipping was publicly confirmed; the campaign was assessed as pure intelligence collection.

Sources

Source list compiled from OTCAD (Stash Kempinski / Secura, GPL-3.0). Description is risidata's own prose.