[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fHtwyF_y4T-CLAIYkwnM0J2BuqHFDhhJbtcl1E_9hvX4":3},{"article":4,"iocs":39},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":24,"category":25,"article_tags":28},"6cae8af4-e049-44aa-ba1c-4351be664471","Kimsuky targets organizations with PebbleDash-based tools","kimsuky-targets-organizations-with-pebbledash-based-tools-109f90","Kaspersky researchers analyze a range of new PebbleDash-based tools used in recent Kimsuky campaigns and reveal their connection to the AppleSeed malware cluster.","Kaspersky researchers have identified a suite of new tools based on PebbleDash being used by the North Korean-linked Kimsuky threat actor in recent campaigns. The analysis reveals these tools are connected to the AppleSeed malware cluster, expanding the known toolkit of this persistent state-sponsored group.","Kimsuky deploys PebbleDash-based tools linked to AppleSeed malware cluster",null,"https:\u002F\u002Fsecurelist.com\u002Fkimsuky-appleseed-pebbledash-campaigns\u002F119785\u002F","https:\u002F\u002Fmedia.kasperskycontenthub.com\u002Fwp-content\u002Fuploads\u002Fsites\u002F43\u002F2026\u002F05\u002F14081540\u002FSL-Kimsuki-featured-scaled.jpg","2026-05-14T11:00:58+00:00","2026-05-14T12:00:10.646675+00:00",8,[18,21],{"name":19,"type":20},"Kimsuky","threat_actor",{"name":22,"type":23},"Kaspersky","vendor","6cbdd207-aaa1-4176-9534-e156b125e917",{"id":24,"icon":11,"name":26,"slug":27},"Nation-state","nation-state",[29,34],{"category":30},{"id":31,"icon":11,"name":32,"slug":33},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":35},{"id":36,"icon":11,"name":37,"slug":38},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[40,43],{"type":33,"value":41,"context":42},"PebbleDash","Tool framework used by Kimsuky in recent campaigns",{"type":33,"value":44,"context":45},"AppleSeed","Malware cluster connected to PebbleDash-based tools"]