Stardust Chollima
Discover the adversaries targeting your industry
Back to Adversary Universe
STARDUST CHOLLIMA is a Democratic People’s Republic of Korea (DPRK)-nexus adversary that has been active operationally since at least 2015 and is affiliated with large-scale currency generation operations. CrowdStrike Intelligence assesses that STARDUST CHOLLIMA likely represents an element of Bureau 121 of the DPRK’s Reconnaissance General Bureau (RGB) based on public disclosures by the U.S. gove...
-
Stardust Chollima
-
North Korea, East Asia, Asia
Community Identifiers
APT38, Lazarus Group, Leery Turtle, CryptoCore, COPERNICIUM, CryptoMimic, Alluring Pisces, Sapphire Sleet, Bluenoroff, CageyChameleon, TA444, HIDDEN COBRA, BeagleBoyz, Dangerous Password, TAG-71
Objective
Financial Gain, Intelligence Gathering
Motivation
State-Sponsored, Criminal
Who's targeting your industry?
Today's adversaries are faster, smarter, and better resourced. Know who they are and how to stop them.
View adversaries
CrowdStrike 2025 Threat Hunting Report
Adversaries weaponize and target AI at scale.
