CrowdStrike named a Leader in the 2026 Gartner® Magic Quadrant™ for Endpoint Protection. Download report
Your Cart
Added to Cart
There's nothing in your cart
per endpoint / per year
per endpoint / per month
Famous Chollima
Discover the adversaries targeting your industry
Back to Adversary Universe
Formerly tracked by CrowdStrike Intelligence as the BadClone activity cluster, FAMOUS CHOLLIMA has been active since at least 2018. The adversary primarily conducts operations to illicitly obtain freelance or full-time equivalent (FTE) work to earn a salary that can be funneled to North Korea. The adversary has also deployed the custom malware families BeaverTail and InvisibleFerret as well as rem...
-
Famous Chollima
-
North Korea, East Asia, Asia
Community Identifiers
Contagious Interview, UNC5267, NICKEL TAPESTRY, Tenacious Pungsan, Void Dokkaebi, Gwisin Gang, PurpleDelta, UNC5342, Wagemole, Storm-1877, PurpleBravo, Coral Sleet
Objective
Financial Gain
Motivation
State-Sponsored
Who's targeting your industry?
Today's adversaries are faster, smarter, and better resourced. Know who they are and how to stop them.
View adversaries
CrowdStrike 2025 Threat Hunting Report
Adversaries weaponize and target AI at scale.
