Velvet Chollima

North Korea


VELVET CHOLLIMA is a Democratic People’s Republic of Korea (DPRK) adversary active since 2010. VELVET CHOLLIMA has targeted U.S. and Republic of Korea (RoK) government entities, journalists reporting on Korean peninsula issues, and individuals researching East Asian policy at non-governmental organizations (NGOs), think tanks, and in academia in intelligence collection operations. One notable exce...

Community Identifiers



  • SVY2WGuJtRcq3dv9AjwkK7HFNE1r
  • HFYpgSrvn6dxZUqX72ifbLt
  • bvq79enT0xLHOrm
  • kfAUnXZCIJl3


  • GrWPK3BnNm5SQfw

Contact our team about
IOCs for this adversary


During a cybersecurity incident, indicators of compromise (IoC) are clues and evidence of a data breach.