PANews August 13 news, Slow Fog CISO 23pds tweeted that a suspected member of the North Korean hacker group Kimsuky APT encountered a major data leak in early June 2025, with hundreds of GB of internal files and tools exposed. The leaked content includes backdoors, phishing frameworks, and reconnaissance operations, with the related data coming from two compromised systems operated by an operator codenamed 'KIM', one of which is a Linux development workstation running Deepin 20.9, and the other is a VPS used for spear phishing.
