![](https://webcf.waybackmachine.org/web/20220825215543/https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2022/08/24163735/kimsuky-gold-dragon_featured-800x450.jpg)
Kimsuky’s GoldDragon cluster and its C2 operations
Kimsuky (also known as Thallium, Black Banshee and Velvet Chollima) is a prolific and active threat actor primarily targeting Korea-related entities. In early 2022, we observed this group was attacking the media and a think-tank in South Korea.