TAG-120 - DPRK Threat Actor | lazarus.day

TAG-120

2025-02-13 • Recorded Future • Inside the Scam: North Korea’s IT Worker Threat

25

Related Actors
1

Related Reports

Related Actors

Storm-1877

Microsoft

Contagious Interview

First seen: Apr 2023

Last seen: May 2024

Famous Chollima

Crowd Strike

First seen: Aug 2024

Last seen: Jun 2026

UNC5267

Mandiant

Famous Chollima

First seen: Sep 2024

Last seen: Mar 2026

Nickel Tapestry

Secure Works

Famous Chollima

First seen: Oct 2024

Last seen: May 2025

Tenacious Pungsan

Datadog

Famous Chollima

First seen: Oct 2024

Last seen: Oct 2024

Purple Bravo

Recorded Future

Famous Chollima

First seen: Feb 2025

Last seen: Jan 2026

TAG-121

Recorded Future

Contagious Interview

First seen: Feb 2025

Last seen: Feb 2025

Void Dokkaebi

Trend Micro

Famous Chollima

First seen: Apr 2025

Last seen: May 2026

UNC5342

Mandiant

Famous Chollima

First seen: Apr 2025

Last seen: Oct 2025

Water Plum

NTTSecurity

Famous Chollima

First seen: May 2025

Last seen: Mar 2026

Gwisin Gang

Dtex Systems

Famous Chollima

First seen: May 2025

Last seen: May 2025

Elusive Comet

Security Alliance

Famous Chollima

First seen: Mar 2025

Last seen: Apr 2025

Jasper Sleet

Microsoft

Famous Chollima

First seen: Jun 2025

Last seen: Apr 2026

Storm-0287

Microsoft

Jasper Sleet

First seen: Apr 2023

Last seen: Jun 2025

Contagious Interview

Paloalto Networks

Famous Chollima

First seen: Nov 2023

Last seen: Jun 2026

G1052

MITRE

Contagious Interview

First seen: Oct 2025

Last seen: Oct 2025

Coral Sleet

Microsoft

Storm-1877

First seen: Mar 2026

Last seen: Mar 2026

Nickel Alley

Secure Works

Purple Bravo

First seen: Mar 2026

Last seen: Mar 2026

Polin Rider

OSM

Contagious Interview

First seen: Mar 2026

Last seen: Jun 2026

Hexagonal Rodent

Expel

Famous Chollima

First seen: Apr 2026

Last seen: Apr 2026

UNK_Dead Drop

Proofpoint

Contagious Interview

First seen: Jun 2026

Last seen: Jun 2026

Deceptive Development

ESET

Contagious Interview

First seen: Feb 2025

Last seen: May 2026

DEV#POPPER

Securonix

Contagious Interview

First seen: Apr 2024

Last seen: Apr 2026

Wagemole

Paloalto Networks

Famous Chollima

First seen: Nov 2023

Last seen: Mar 2026

CL-STA-0240

Paloalto Networks

Contagious Interview

First seen: Nov 2023

Last seen: Oct 2024

Related Reports

Top Authors

View all reports in this cluster

2025-02-13

Recorded Future

Inside the Scam: North Korea’s IT Worker Threat

#BeaverTail #ITWorker #InvisibleFerret #OtterCookie #PurpleBravo #TAG-121 #TAG-120

View all reports in this cluster