DarkHotel
DarkHotel is a South Korea-attributed nation-state APT group with an espionage motive, tracked by Brandefense. It targets 14 sectors, including Government and Technology, in 37 countries, including the United States and the United Kingdom. It uses 30 MITRE ATT&CK techniques and exploits 16 known CVEs.
- DUBNIUM
- Zigzag Hail
- APT-Q-14
- Origin
- South Korea
- Techniques
- 30
- Exploited CVEs
- 16
- Record updated
Who They Target.
About DarkHotel.
Darkhotel is a suspected South Korean threat group that has targeted victims primarily in East Asia since at least 2004. The group's name is based on cyber espionage operations conducted via hotel Internet networks against traveling executives and other select guests.
Last updated Oct 7, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.