Threat Actor
Stolen Pencil
Also known as: Stolen Pencil
[Stolen Pencil](https://attack.mitre.org/groups/G0086) is a threat group likely originating from DPRK that has been active since at least May 2018. The group appears to have targeted academic institutions, but its motives remain unclear.(Citation: Netscout Stolen Pencil Dec 2018)
Properties
- stix_id
- intrusion-set--7a0d4c09-dfe7-4fa2-965a-1a0e42fedd70
- signal_observed_at
- 2026-09-11T17:55:00+00:00
- type
- intrusion-set
Explore this actor's full graph with Ninja Signal