KakaoTalk is a popular South Korean messaging app.
KakaoTalk is a tool tracked across 7 threat clusters and 20 intelligence report mentions on ThreatCluster. First observed November 5, 2025; most recent activity April 14, 2026.
KakaoTalk is a popular South Korean messaging app. In recent North Korean cyber campaigns, actors have hijacked KakaoTalk and Google accounts to gain remote control of target mobile devices, enabling surveillance or device wiping, demonstrating how consumer apps can serve as attack surfaces and pivot points for broader operations.
North Korea-linked hackers from the Konni group executed a spear-phishing campaign utilizing the KakaoTalk messaging platform to distribute malware and steal sensitive information. The campaign involved sending emails…
An Australian parliamentary inquiry is examining the potential ban of WeChat due to security and influence risks. The inquiry, which includes testimonies from major social media firms, highlights WeChat's refusal to…
A North Korea-linked hacking group has executed a new cyberattack capable of remotely controlling Android smartphones and PCs, leading to data deletion and malware distribution. The attack, attributed to groups Kimsuky…
Five individuals have pleaded guilty to facilitating North Korean operatives in obtaining remote IT jobs at U.S. companies by using false and stolen identities. The U.S. Department of Justice has also seized $15 million…
South Korean authorities suspect that North Korea's Lazarus Group was behind a hack of Upbit, resulting in losses of approximately $30.4 million. The breach involved unusual activity in Solana tokens and led Upbit to…
North Korean KONNI hackers have exploited Google's Find Hub to remotely wipe target devices. They use KakaoTalk to deliver malware and gain access to victims' Gmail accounts through malicious versions of the Find Hub.…
North Korean KONNI hackers are exploiting Google's Find Hub to remotely wipe target devices and hack Gmail accounts. They use malicious versions of the Find Hub and KakaoTalk to deliver malware and harvest credentials…
KakaoTalk is a popular South Korean messaging app.
The most recent intelligence report mentioning KakaoTalk on ThreatCluster is dated April 14, 2026. Activity was first observed November 5, 2025, giving a tracked span from then to April 14, 2026.
Across ThreatCluster reporting, KakaoTalk most frequently co-occurs with Apt37, Emerald Sleet, Kimsuky, Konni, ScarCruft, among 12 tracked related entities.
The most significant recent cluster is “North Korean Konni Group Uses KakaoTalk for Malware Distribution in Spear-Phishing Campaign” (9 articles · Updated March 16, 2026). KakaoTalk appears across 7 threat clusters in total, listed above with sources.
KakaoTalk appears in 20 intelligence report mentions across 7 deduplicated threat clusters, aggregated from 17,000+ monitored sources.