UNC5267 - DPRK Threat Actor | lazarus.day

UNC5267

2024-09-23 • Mandiant • Staying a Step Ahead: Mitigating the DPRK IT Work…

25

Related Actors
3

Related Reports

Related Actors

Storm-1877

Microsoft

Contagious Interview

First seen: Apr 2023

Last seen: May 2024

Famous Chollima

Crowd Strike

First seen: Aug 2024

Last seen: Jun 2026

Nickel Tapestry

Secure Works

Famous Chollima

First seen: Oct 2024

Last seen: May 2025

Tenacious Pungsan

Datadog

Famous Chollima

First seen: Oct 2024

Last seen: Oct 2024

Purple Bravo

Recorded Future

Famous Chollima

First seen: Feb 2025

Last seen: Jan 2026

TAG-120

Recorded Future

Purple Bravo

First seen: Feb 2025

Last seen: Feb 2025

TAG-121

Recorded Future

Contagious Interview

First seen: Feb 2025

Last seen: Feb 2025

Void Dokkaebi

Trend Micro

Famous Chollima

First seen: Apr 2025

Last seen: May 2026

UNC5342

Mandiant

Famous Chollima

First seen: Apr 2025

Last seen: Oct 2025

Water Plum

NTTSecurity

Famous Chollima

First seen: May 2025

Last seen: Mar 2026

Gwisin Gang

Dtex Systems

Famous Chollima

First seen: May 2025

Last seen: May 2025

Elusive Comet

Security Alliance

Famous Chollima

First seen: Mar 2025

Last seen: Apr 2025

Jasper Sleet

Microsoft

Famous Chollima

First seen: Jun 2025

Last seen: Apr 2026

Storm-0287

Microsoft

Jasper Sleet

First seen: Apr 2023

Last seen: Jun 2025

Contagious Interview

Paloalto Networks

Famous Chollima

First seen: Nov 2023

Last seen: Jun 2026

G1052

MITRE

Contagious Interview

First seen: Oct 2025

Last seen: Oct 2025

Coral Sleet

Microsoft

Storm-1877

First seen: Mar 2026

Last seen: Mar 2026

Nickel Alley

Secure Works

Purple Bravo

First seen: Mar 2026

Last seen: Mar 2026

Polin Rider

OSM

Contagious Interview

First seen: Mar 2026

Last seen: Jun 2026

Hexagonal Rodent

Expel

Famous Chollima

First seen: Apr 2026

Last seen: Apr 2026

UNK_Dead Drop

Proofpoint

Contagious Interview

First seen: Jun 2026

Last seen: Jun 2026

Deceptive Development

ESET

Contagious Interview

First seen: Feb 2025

Last seen: May 2026

DEV#POPPER

Securonix

Contagious Interview

First seen: Apr 2024

Last seen: Apr 2026

Wagemole

Paloalto Networks

Famous Chollima

First seen: Nov 2023

Last seen: Mar 2026

CL-STA-0240

Paloalto Networks

Contagious Interview

First seen: Nov 2023

Last seen: Oct 2024

Related Reports

Top Authors

View all reports in this cluster

2026-03-09

Google

Cloud Threat Horizons Report H1 2026

#UNC4899 #UNC5267

2025-08-03

划水摸鱼

DRPK Threats to Web3 and Cryptocurrency

#UNC1069 #UNC1720 #UNC4899 #UNC5342 #UNC5267

2024-09-23

Mandiant

Staying a Step Ahead: Mitigating the DPRK IT Worker Threat

#ITWorker #UNC5267

View all reports in this cluster