| active since 2022 (per Unit42) | Contagious Interview campaign (fake job interviews of IT engineers) | | FAMOUS CHOLLIMA (allegedly; unclear whether a Lazarus subgroup) |
| 2024-08-20T05:00Z (datePublished) | FAMOUS CHOLLIMA insider IT worker infiltration of U.S. technology companies (2024 Threat Hunting Report) | U.S. | FAMOUS CHOLLIMA |
| February 27, 2025 | FAMOUS CHOLLIMA incidents in 2024 (2025 Global Threat Report) | | FAMOUS CHOLLIMA |
| August 04, 2025 | FAMOUS CHOLLIMA GenAI-enabled infiltration of over 320 companies (2025 Threat Hunting Report) | | FAMOUS CHOLLIMA |
| 01/09/2026 | Western companies in healthcare, IT, sales, and marketing | AU, MULTIPLE | FAMOUS CHOLLIMA |
| May 14, 2026 | FAMOUS CHOLLIMA and STARDUST CHOLLIMA targeting of fintechs, exchanges and banks (2026 Financial Services Threat Landscape Report) | North America, Europe, and Asia | FAMOUS CHOLLIMA; STARDUST CHOLLIMA |
| June 09, 2026 | DPRK adversaries targeting the technology sector; FAMOUS CHOLLIMA IT worker infiltration (2026 Technology Threat Landscape Report) | North America, Europe, and Asia | FAMOUS CHOLLIMA, LABYRINTH CHOLLIMA, and STARDUST CHOLLIMA |
| August 03, 2026 | FAMOUS CHOLLIMA AI supply chain compromise of cryptocurrency and blockchain companies (2026 Threat Hunting Report) | | FAMOUS CHOLLIMA |