Higaisa
Higaisa is a South Korea-attributed nation-state APT group with an espionage motive, tracked by Brandefense. It targets 13 sectors, including Government and Technology, in 43 countries, including the United States and the United Kingdom. It uses 47 MITRE ATT&CK techniques and exploits 13 known CVEs.
- Origin
- South Korea
- Techniques
- 47
- Exploited CVEs
- 13
- First seen
- Jan 1, 2009
- Last seen
- Jun 11, 2020
- Record updated
Who They Target.
Sectors · 13
Countries · 43
Labelsespionage
About Higaisa.
Higaisa is a threat group suspected to have South Korean origins. Higaisa has targeted government, public, and trade organizations in North Korea; however, they have also carried out attacks in China, Japan, Russia, Poland, and other nations.
Last updated Sep 19, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.