Labyrinth Chollima

North Korea


LABYRINTH CHOLLIMA is one of the most prolific Democratic People’s Republic of Korea (DPRK) adversaries tracked by CrowdStrike and has been active at least since 2009. CrowdStrike assesses this adversary is likely affiliated with Bureau 121 of the DPRK’s Reconnaissance General Bureau (RGB) and primarily conducts espionage operations aimed at the U.S. and Republic of Korea (RoK) militaries and defe...

Community Identifiers



  • blpPQBaRi9J4xuoWUDsIfAO
  • LUXPzotIGeTrWiY
  • qOM318pr25FR
  • OAo4ysIvFRLXKwfQxJegbW8k7dzD


  • ZgMF1lqV7ikHQy0

Contact our team about
IOCs for this adversary


During a cybersecurity incident, indicators of compromise (IoC) are clues and evidence of a data breach.