Search for adversaries

Famous Chollima

North Korea

Details

Formerly tracked by CrowdStrike Intelligence as the BadClone activity cluster, FAMOUS CHOLLIMA has been active since at least 2018. The adversary primarily conducts operations to illicitly obtain freelance or full-time equivalent (FTE) work to earn a salary that can be funneled to North Korea. The adversary has also deployed the custom malware families BeaverTail and InvisibleFerret as well as rem...

Community Identifiers

En4Avwz3a7IWU8x

Objective

  • JVYqy9EFepxC1AK

Motivation

State-Sponsored

Contact our team about
IOCs for this adversary

?

During a cybersecurity incident, indicators of compromise (IoC) are clues and evidence of a data breach.

Unlock the adversary universe

First Name
Last Name
Business Email
Company Name
Job Level
Country
Phone Number
By clicking submit, I consent to the processing of my contact information by CrowdStrike and its partners, including to CrowdStrike contacting me and sharing my contact information with its partners. I acknowledge that CrowdStrike will use and keep my contact information for as long as necessary for these purposes in accordance with its Privacy Notice.

Thank you for your request!

A member of our team will be in touch shortly.

CrowdStrike logo