Earth Imp is an APT group reportedly linked to North Korea, engaged in persistent cyber espionage campaigns and using advanced malware tooling.
Earth Imp is an APT group reportedly linked to North Korea, engaged in persistent cyber espionage campaigns and using advanced malware tooling. Its likely state-sponsored backing and recurring activity across multiple targets make it a significant and enduring risk in cybersecurity.
In September 2025, the North Korea-linked APT group Konni, also known as Kimsuky, targeted users by posing as counselors to steal data and wipe Android phones using Google Find Hub. The attacks also affected Windows…