NICKEL ALLEY

2026-03-23 Secure Works

https://www.sophos.com/en-us/threat-profiles/nickel-alley

Thumbnail for NICKEL ALLEY

NICKEL ALLEY is described as a North Korean government-linked threat group focused on espionage and surveillance. The group targets technology-sector professionals by advertising fake job opportunities and moving victims through a fraudulent interview process. The activity is publicly tracked as the Contagious Interview campaign and overlaps with aliases including CL-STA-0240, Purplebravo, Storm-1877, and Tenacious Pungsan. The core risk is malware delivery through social engineering against job seekers and technical staff.

Related Actors

Related Reports

« Back