Threat actor
Famous Chollima
North Korea
Tracked by CyberSIXT since 16 Oct 2025
- Articles · all time
- 20
- Articles · last 30 days
- 0
- CVEs exploited · attributed · all time
- 0
- Research reports · all time
- 3
20 articles from 1 outlet; the latest 30 days ago.
- Article
- Research report
Show as table
Names and sources
- WageMole
- Named by CyberSIXT coverage
- Famous Chollima
- Named by Malpedia · wagemole
- Nickel Tapestry
- Named by Malpedia · wagemole
- PurpleBravo
- Named by Malpedia · wagemole
- Storm-1877
- Named by Malpedia · wagemole
- UNC5267
- Named by Malpedia · wagemole
- Void Dokkaebi
- Named by Malpedia · wagemole
- WageMole
- Named by Malpedia · wagemole
All 21 names
- WaterPlum
- Named by Malpedia · wagemole
- Coral Sleet
- Named by Microsoft · Coral Sleet
- Storm-1877
- Named by Microsoft · Coral Sleet
- Famous Chollima
- Named by MISP Galaxy · 09aa3edb-e956-43f0-9fcb-a3154b47d202
- Nickel Tapestry
- Named by MISP Galaxy · 09aa3edb-e956-43f0-9fcb-a3154b47d202
- PurpleBravo
- Named by MISP Galaxy · 09aa3edb-e956-43f0-9fcb-a3154b47d202
- Storm-1877
- Named by MISP Galaxy · 09aa3edb-e956-43f0-9fcb-a3154b47d202
- UNC5267
- Named by MISP Galaxy · 09aa3edb-e956-43f0-9fcb-a3154b47d202
- Void Dokkaebi
- Named by MISP Galaxy · 09aa3edb-e956-43f0-9fcb-a3154b47d202
- WageMole
- Named by MISP Galaxy · 09aa3edb-e956-43f0-9fcb-a3154b47d202
- WaterPlum
- Named by MISP Galaxy · 09aa3edb-e956-43f0-9fcb-a3154b47d202
- WaterPlum’s Cluster B
- Named by CyberSIXT coverage
- 09aa3edb-e956-43f0-9fcb-a3154b47d202
- Named by CyberSIXT coverage
Attributed facts
- category
- state (Microsoft · Coral Sleet)
- origin
- North Korea (Microsoft · Coral Sleet)
- origin
- North Korea (MISP Galaxy · 09aa3edb-e956-43f0-9fcb-a3154b47d202)
Malware and tools
BeaverTail (Malpedia · wagemole) JADESNOW (Malpedia · wagemole) OtterCookie (Malpedia · wagemole) OtterCandy (Malpedia · wagemole) BeaverTail (Malpedia · wagemole) FlexibleFerret (Malpedia · wagemole) FriendlyFerret (Malpedia · wagemole) FrostyFerret (Malpedia · wagemole) GolangGhost (Malpedia · wagemole) InvisibleFerret (Malpedia · wagemole) PylangGhost (Malpedia · wagemole) AkdoorTea (Malpedia · wagemole) Beavertail (Malpedia · wagemole) GolangGhost (Malpedia · wagemole) Tropidoor (Malpedia · wagemole) TsunamiKit (Malpedia · wagemole)
- Nisos Exposes North Korean Fake IT Workers in 170,000 Job BidsDark Reading
- North Korean Recruiters Target Developers With Malware in InterviewsSecurityOnline
- North Korean Hackers Infected 30,000 Devices Through Fake JobsInfosecurity
- North Korean Fake Jobs Infected 30,000 Devices and Stole $10.7mSecurityWeek
- North Korean Fake Job Interviews Infect 30,000 Devices WorldwideSecurity Affairs
- Researchers Map Lazarus Into Six North Korean Cyber UnitsInfosecurity
- Fake Job Interviews Deliver PylangGhost and GolangGhost RATs to Crypto WorkersSecurityOnline
- North Korean hackers use fake crypto job offers to install RATsInfosecurity
- North Korean hackers weaponise developer tools to spread malwareThe Hacker News
- North Korean Hackers Use Supply Chain npm SDK to Steal SecretsThe Hacker News
- Malicious npm Dependency Linked to AI Assisted Commit Targets Crypto WalletsInfosecurity
- North Korean Fake Job Scam Triggers Contagious Interview MalwareDark Reading
The latest 12 are listed. See all 20 articles in the timeline.