threat actor
Silent Chollima
Andariel is a threat actor that primarily targets South Korean corporations and institutions. They are believed to collaborate with or operate as a subsidiary organization of the Lazarus threat group. WHOIS utilizes spear phishing attacks, watering hole attacks, and supply chain attacks for initial access. They have been known to exploit vulnerabilities and use malware such as Infostealer and TigerRAT.
Curated · btcintel
claims we make, each with its source and citation · sources may contradict; we show the set, never a score
Facts
- id
- silent-chollima
- kind
- threat actor
- status
- unknown
- aliases
- Andariel · Appleworm · APT 38 · APT38 · APT-C-26 · ATK117 · ATK3 · BeagleBoyz · Black Artemis · Bluenoroff · Bureau 121 · Citrine Sleet · COPERNICIUM · COVELLITE · Dark Seoul · DEV-0139 · DEV-1222 · Diamond Sleet · G0032 · G0082 · GOP · Group 77 · Guardian of Peace · Hastati Group · Hidden Cobra · Labyrinth Chollima · Lazarus Group · Moonstone Sleet · NewRomanic Cyber Army Team · Nickel Academy · NICKEL GLADSTONE · Onyx Sleet · Operation AppleJeus · Operation DarkSeoul · Operation GhostSecret · Operation Troy · OperationTroy · PLUTONIUM · Sapphire Sleet · Stardust Chollima · STARDUST CHOLLIMA · Subgroup: Andariel · Subgroup: Bluenoroff · TA404 · Unit 121 · Whois Hacking Team · WHOis Team · Zinc
- jurisdictions
- —
- claims naming it
- 0 · 0 attributions · 0 relations · 0 events
Identifiers
- misp-galaxy 245c8dde-ed42-4c49-b48b-634e3e21bdd7via misp-galaxy-threat-actor
- misp-galaxy 68391641-859f-4a9a-9a1e-3e5cf71ec376via misp-galaxy-threat-actor
- misp-galaxy d8e1762a-0063-48c2-9ea1-8d176d14b70fvia misp-galaxy-threat-actor
Relations
computedno relations recorded for this entity
Events
computedno dated events recorded for this entity
Claims naming this entity
computedno current claim names this entity
Subjects0 subjects carry a claim naming this entity · a sample
computedno subject carries a claim naming this entity
Community
notes from Nostr labelers · never merged with the bands above · not endorsed
Community content is indexed from Nostr and not endorsed by btcintel.
not computed yetNot indexed yet: the community index has not looked at this subject.