Famous Chollima

Formerly tracked by CrowdStrike Intelligence as the BadClone activity cluster, FAMOUS CHOLLIMA has been active since at least 2018. The adversary primarily conducts operations to illicitly obtain freelance or full-time equivalent (FTE) work to earn a salary that can be funneled to North Korea. The adversary has also deployed the custom malware families BeaverTail and InvisibleFerret

2024-08-07 • Crowd Strike • Famous Chollima Adversary Profile

Related Actors

Related Reports

Top Authors

View all reports in this cluster

2026-06-16
Ahnlab
#Trend #Lazarus #FamousChollima #Kimsuky #TA-RedAnt
2026-06-16
Ahnlab
#Lazarus #FamousChollima #Kimsuky #TA-RedAnt #Trend
2026-06-10
Kmsec
#FamousChollima
2026-06-09
Crowd Strike
#FamousChollima #LabyrinthChollima #StardustChollima #Trend
2026-05-31
Socket
#FamousChollima #ContagiousInterview #SupplyChain #T1195.002 #T1204.002 #T1059.007 #T1027 #T1102.001 #T1105
2026-05-28
Safe Dep
#FamousChollima #NPM #T1195 #T1195.002 #T1102 #T1102.002 #T1567 #T1567.002 #T1056 #T1056.001 #T1113 #T1005 #T1552 #T1552.004 #T1059 #T1059.001 #T1059.003 #T1547 #T1547.001 #T1053 #T1053.005 #T1543 #T1543.001 #T1543.004 #HuggingFace #T1119
2026-05-14
Crowd Strike
#PressureChollima #GoldenChollima #FamousChollima #StardustChollima
2026-05-01
Kmsec
#FamousChollima #NPM #PylangGhost
2026-04-29
Reversing Labs
#FamousChollima #PromptMink
2026-04-13
Bitso
#ClickFix #FamousChollima
2026-04-10
Panther
#FamousChollima #NPM #T1552.001 #T1083 #T1098.004
2026-04-03
Panther
#FamousChollima #NPM #T1059.007 #T1041 #T1132.001 #T1555.003 #T1001 #T1497.001 #T1480 #T1205
2026-03-19
Bitso
#FamousChollima #ITWorker #Youtube
2026-03-17
Kmsec
#ContagiousTrader #FamousChollima #NPM
2026-03-13
Kmsec
#FamousChollima #PylangGhost #NPM

View all reports in this cluster