Nickel Alley - DPRK Threat Actor | lazarus.day

Nickel Alley

2026-03-23 • Secure Works • NICKEL ALLEY

25

Related Actors
2

Related Reports

Related Actors

Storm-1877

Microsoft

Contagious Interview

First seen: Apr 2023

Last seen: May 2024

Famous Chollima

Crowd Strike

First seen: Aug 2024

Last seen: Jun 2026

UNC5267

Mandiant

Famous Chollima

First seen: Sep 2024

Last seen: Mar 2026

Nickel Tapestry

Secure Works

Famous Chollima

First seen: Oct 2024

Last seen: May 2025

Tenacious Pungsan

Datadog

Famous Chollima

First seen: Oct 2024

Last seen: Oct 2024

Purple Bravo

Recorded Future

Famous Chollima

First seen: Feb 2025

Last seen: Jan 2026

TAG-120

Recorded Future

Purple Bravo

First seen: Feb 2025

Last seen: Feb 2025

TAG-121

Recorded Future

Contagious Interview

First seen: Feb 2025

Last seen: Feb 2025

Void Dokkaebi

Trend Micro

Famous Chollima

First seen: Apr 2025

Last seen: May 2026

UNC5342

Mandiant

Famous Chollima

First seen: Apr 2025

Last seen: Oct 2025

Water Plum

NTTSecurity

Famous Chollima

First seen: May 2025

Last seen: Mar 2026

Gwisin Gang

Dtex Systems

Famous Chollima

First seen: May 2025

Last seen: May 2025

Elusive Comet

Security Alliance

Famous Chollima

First seen: Mar 2025

Last seen: Apr 2025

Jasper Sleet

Microsoft

Famous Chollima

First seen: Jun 2025

Last seen: Apr 2026

Storm-0287

Microsoft

Jasper Sleet

First seen: Apr 2023

Last seen: Jun 2025

Contagious Interview

Paloalto Networks

Famous Chollima

First seen: Nov 2023

Last seen: Jun 2026

G1052

MITRE

Contagious Interview

First seen: Oct 2025

Last seen: Oct 2025

Coral Sleet

Microsoft

Storm-1877

First seen: Mar 2026

Last seen: Mar 2026

Polin Rider

OSM

Contagious Interview

First seen: Mar 2026

Last seen: Jun 2026

Hexagonal Rodent

Expel

Famous Chollima

First seen: Apr 2026

Last seen: Apr 2026

UNK_Dead Drop

Proofpoint

Contagious Interview

First seen: Jun 2026

Last seen: Jun 2026

Deceptive Development

ESET

Contagious Interview

First seen: Feb 2025

Last seen: May 2026

DEV#POPPER

Securonix

Contagious Interview

First seen: Apr 2024

Last seen: Apr 2026

Wagemole

Paloalto Networks

Famous Chollima

First seen: Nov 2023

Last seen: Mar 2026

CL-STA-0240

Paloalto Networks

Contagious Interview

First seen: Nov 2023

Last seen: Oct 2024

Related Reports

Top Authors

View all reports in this cluster

2026-03-23

Sophos

NICKEL ALLEY strategy: Fake it ‘til you make it

#NickelAlley #ClickFix #ContagiousInterview #PylangGhost

2026-03-23

Secure Works

NICKEL ALLEY

#NickelAlley

View all reports in this cluster