Threat Actor

Stolen Pencil

Also known as: Stolen Pencil

Stolen Pencil is a threat group likely originating from DPRK that has been active since at least May 2018. The group appears to have targeted academic institutions, but its motives remain unclear.

0
indicators on this record

Properties

Last source
MITRE ATT&CK
STIX ID
intrusion-set--7a0d4c09-dfe7-4fa2-965a-1a0e42fedd70
In Signal since
initial import (Sep 2026)
Retrieved at
2026-10-18T13:40:42+00:00
Type
intrusion-set

Explore this actor's full graph with Ninja Signal

Search in SpektrOpen Signal Desktop
Stolen Pencil — Threat Actor Profile — Ninja Signal | Ninja Signal