2025-02-12
SecureWorks
Unmasking North Korean IT Worker Infiltration Schemes
#NickelTapestry
#Youtube
NickelTapestry
"NICKEL TAPESTRY encompasses North Korean fraudulent IT worker schemes. The group comprises multiple clusters of activity operated on behalf of North Korean interests. North Korean IT workers have infiltrated Western companies for illicit revenue generation. The fraudulent workers also pose an insider threat risk wherein theft of intellectual property has been observed. U.S. Government advisories have linked this activity to revenue generation for illicit weapons program, including weapons of mass destruction (WMD)."
- SecureWorks, https://www.secureworks.com/research/threat-profiles/nickel-tapestry
Also known as
| Name | Named by | AKA | First seen | Last seen |
|---|---|---|---|---|
| FamousChollima | CrowdStrike | - | 2024-08-07 | 2025-02-28 |
| NickelTapestry | SecureWorks | FamousChollima | 2024-10-16 | 2025-02-12 |
| PurpleBravo | RecordedFuture | FamousChollima | 2025-02-13 | 2025-02-13 |
| TenaciousPungsan | Datadog | FamousChollima | 2024-10-24 | 2024-10-24 |
| UNC5267 | Mandiant | FamousChollima | 2024-09-23 | 2024-09-23 |
| VoidDokkaebi | TrendMicro | FamousChollima | 2025-04-23 | 2025-04-23 |