SlowMist CISO: Kimsuky APT Member Suffers Major Data Breach

On August 13, SlowMist CISO 23pds revealed that a suspected member of the North Korea-linked Kimsuky APT group suffered a massive data breach in early June 2025. Hundreds of gigabytes of internal files and hacking tools were exposed, including backdoors, phishing frameworks, and reconnaissance assets. The leaked data came from two compromised systems attributed to operator “KIM”: a Linux development workstation running Deepin 20.9, and a VPS used for spear-phishing campaigns. SlowMist’s disclosure provides rare insight into Kimsuky’s toolset and operational tactics. This cybersecurity incident underscores the persistent threat posed by APT groups to the broader tech ecosystem, including cryptocurrency platforms.