Interview with the Chollima V
Contents
Another day, another DPRK infiltration attempt.
It’s Friday, so I won’t bore you with a sermon about threat actors’ tactics, techniques and procedures or indicators of veterancy, but I’ll allow myself to echo my words from our last article regarding the Kim Boys:
“If one of them messes up, prepare for a quick follow-up”.
And if we are all together here today (once again) it means two things:
The previous pony-heads messed up bad.
A new pony-head tried to play hero. And messed up too.
There’s something bluntly kommissar-esque about this (and here I am, talking about TTPs again), as I interpret this badly-planned insistence not as persistence (like an APT) but rather as the frustration of someone higher up constantly sending one after another until someone could claim the prize. This someone wasn’t “Sebastian”… that’s for sure.
Who’s “Sebastian”? Our friend here, a “Colombian” “software engineer” “from Pereira”.
He likes doing typical colombian things like not speaking …
It’s Friday, so I won’t bore you with a sermon about threat actors’ tactics, techniques and procedures or indicators of veterancy, but I’ll allow myself to echo my words from our last article regarding the Kim Boys:
“If one of them messes up, prepare for a quick follow-up”.
And if we are all together here today (once again) it means two things:
The previous pony-heads messed up bad.
A new pony-head tried to play hero. And messed up too.
There’s something bluntly kommissar-esque about this (and here I am, talking about TTPs again), as I interpret this badly-planned insistence not as persistence (like an APT) but rather as the frustration of someone higher up constantly sending one after another until someone could claim the prize. This someone wasn’t “Sebastian”… that’s for sure.
Who’s “Sebastian”? Our friend here, a “Colombian” “software engineer” “from Pereira”.
He likes doing typical colombian things like not speaking …