Skip to content

puNK-003

Linked to North Korea by two sources.

Reports: 2
Last reported: 6 April 2025
Origin: North Korea

ID: punk-003
Sources: MISP Malpedia
Merge evidence: 1 alias match

Reports per quarter

2024 Q3: 1 report
2024 Q4: no reports
2025 Q1: no reports
2025 Q2: 1 report

Dated reports, 2024 Q3 to 2025 Q2.

Techniques seen in the last two years

T1053.005 1 report
T1059.001 1 report
T1059.005 1 report
T1140 1 report
T1518.001 1 report
T1564.001 1 report
T1566.001 1 report
T1571 1 report

Counts come from technique IDs in the actor's report text.

Reports

6 April 2025

How to Remove Lilith RAT: Complete Removal Guide | Trojan Killer

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor How to Remove Lilith RAT: Complete Removal Guide | Trojan Killer
22 August 2024

Analysis of the North Korea-backed puNK-003’s Lilith RAT ported to AutoIt Script

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Analysis of the North Korea-backed puNK-003’s Lilith RAT ported to AutoIt Script

Newest first. Details opens the report in Explore.