Labyrinth Chollima

North Korea

Details

LABYRINTH CHOLLIMA is one of the most prolific Democratic People’s Republic of Korea (DPRK) adversaries tracked by CrowdStrike and has been active at least since 2009. CrowdStrike assesses this adversary is likely affiliated with Bureau 121 of the DPRK’s Reconnaissance General Bureau (RGB) and primarily conducts espionage operations aimed at the U.S. and Republic of Korea (RoK) militaries and defe...

Community Identifiers

oty4CYqKaN58uGg

Objective

  • blpPQBaRi9J4xuoWUDsIfAO
  • LUXPzotIGeTrWiY
  • qOM318pr25FR
  • OAo4ysIvFRLXKwfQxJegbW8k7dzD

Motivation

  • ZgMF1lqV7ikHQy0

Contact our team about
IOCs for this adversary

?

During a cybersecurity incident, indicators of compromise (IoC) are clues and evidence of a data breach.

Resources

2023 Global Threat Report

CrowdStrike OverWatch report banner

New Report: Falcon OverWatch Threat Hunting Leaves Adversaries with Nowhere to Hide

illustration of produces and security icons

Hacking Farm to Table: Threat Hunters Uncover Rise in Attacks Against Agriculture

Unlock the adversary universe