2025-02-26
PaloaltoNetworks
RustDoor and Koi Stealer for macOS Used by North Korea-Linked Threat Actor to Target the Cryptocurrency Sector
#ContagiousInterview
#Koi
#RustDoor
#macOS
#AlluringPisces
AlluringPisces
Also known as
| Name | Named by | AKA | First seen | Last seen |
|---|---|---|---|---|
| APT38 | Mandiant | BlueNoroff | 2018-10-03 | 2025-11-14 |
| AlluringPisces | PaloaltoNetworks | BlueNoroff | 2024-09-09 | 2025-02-26 |
| BeagleBoyz | USCISA | BlueNoroff | 2020-08-26 | 2021-03-04 |
| BlackDev2 | PWC | BlueNoroff | 2021-09-08 | 2023-04-12 |
| BlueNoroff | Kaspersky | - | 2017-04-03 | 2026-04-27 |
| CryptoCore | Clearskysec | BlueNoroff | 2020-06-24 | 2025-10-22 |
| NickelGladstone | SecureWorks | BlueNoroff | - | 2023-03-18 |
| PutridSlug | Cloudflare | BlueNoroff | 2026-03-03 | 2026-03-03 |
| REF9135 | Elastic | BlueNoroff | 2023-06-29 | 2023-06-29 |
| RedCarpet | KRCERT | BlueNoroff | - | - |
| SectorA06 | NSHC | BlueNoroff | 2020-03-12 | 2025-02-11 |
| StardustChollima | CrowdStrike | BlueNoroff | 2018-02-26 | 2026-05-14 |
| T-APT-15 | Tencent | BlueNoroff | 2018-03-07 | 2018-03-07 |
| TAG-71 | RecordedFuture | BlueNoroff | 2023-06-06 | 2024-01-10 |
| TEMP.Hermit | Fireeye | BlueNoroff | 2017-09-13 | 2025-05-14 |
| TraderTraitor | USCISA | BlueNoroff | 2022-04-18 | 2026-05-18 |