Famous Chollima
Discover the adversaries targeting your industry
Formerly tracked by CrowdStrike Intelligence as the BadClone activity cluster, FAMOUS CHOLLIMA has been active since at least 2018. CrowdStrike Intelligence assesses FAMOUS CHOLLIMA likely conducts operations on behalf of North Korea's Munitions Industry Department (MID), which funds and oversees the DPRK's missile and nuclear weapons program. FAMOUS CHOLLIMA conducts two primary lines of operati...
-
Famous Chollima
-
China, North Korea, East Asia, Asia
Community Identifiers
Storm-1877, UNC5267, Tenacious Pungsan, Void Dokkaebi, PurpleBravo, PurpleDelta, UNC5342, Jasper Sleet, Wagemole, Contagious Interview, NICKEL TAPESTRY, Gwisin Gang
Objective
Financial Gain
Motivation
State-Sponsored
CrowdStrike 2026 Threat Hunting Report
Get insights from frontline experts.