Velvet Chollima

North Korea


VELVET CHOLLIMA is a Democratic People’s Republic of Korea (DPRK) adversary active since 2010. VELVET CHOLLIMA has targeted U.S. and Republic of Korea (RoK) government entities, journalists reporting on Korean peninsula issues, and individuals researching East Asian policy at non-governmental organizations (NGOs), think tanks, and in academia in intelligence collection operations. One notable exce...

Community Identifiers



  • ItudV8vq3cjEBkw
  • 6eB1Hg5mjt32Lbp7CcTzEZd
  • euN0HoAiGxWf
  • PbQiTwtqunf90cZWo3JCmGe7Ushr


  • MU2vFNbpOC7j5l8

Contact our team about
IOCs for this adversary


During a cybersecurity incident, indicators of compromise (IoC) are clues and evidence of a data breach.