CrowdStrike 2026 Global Threat Report: The definitive threat intelligence report for the AI era Download report
Velvet Chollima
Discover the adversaries targeting your industry
Back to Adversary Universe
VELVET CHOLLIMA is a Democratic People’s Republic of Korea (DPRK)-nexus adversary active since 2010. VELVET CHOLLIMA has targeted U.S., European, and Republic of Korea (RoK) government entities, journalists reporting on Korean peninsula issues, and individuals researching East Asian policy at non-governmental organizations (NGOs), think tanks, and in academia in intelligence collection operations....
-
Velvet Chollima
-
North Korea, East Asia, Asia
Community Identifiers
TA427, Kimsuky, Konni, APT43, Emerald Sleet, Thallium, Black Banshee, TA408, Crooked Pisces, Cerium, Ruby Sleet, Opal Sleet, Sparkling Pisces, SharpTongue, Osmium, Springtail, TA406
Objective
Financial Gain, Intellectual Property Theft, Intelligence Gathering, Destruction
Motivation
State-Sponsored
Who's targeting your industry?
Today's adversaries are faster, smarter, and better resourced. Know who they are and how to stop them.
View adversaries
CrowdStrike 2025 Threat Hunting Report
Adversaries weaponize and target AI at scale.
