Famous Chollima Adversary Profile
2024-08-12 • Crowd Strike •
https://www.crowdstrike.com/en-us/adversaries/famous-chollima/
Famous Chollima is a North Korea-linked, state-sponsored adversary active since at least 2018 and formerly tracked by CrowdStrike as the BadClone activity cluster. CrowdStrike characterizes the group’s main objective as financial gain through illicit freelance or full-time employment schemes that generate salary income for North Korea. The profile also links the adversary to custom malware families BeaverTail and InvisibleFerret and lists multiple community identifiers, including Contagious Interview, UNC5267, NICKEL TAPESTRY, Tenacious Pungsan, Void Dokkaebi, Gwisin Gang, UNC5342, Wagemole, Storm-1877, PurpleBravo, and Coral Sleet.