DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

STARDUST CHOLLIMA (4)

Events whose actors field, as written by the source, names this.

Date (as written)IncidentCountryActors
April 06, 2018STARDUST CHOLLIMA operations against financial institutions incl. SWIFT abuse; suspected targeting of Latin America-based organizations since mid-2017Latin America-basedSTARDUST CHOLLIMA
2025-06-18T05:00:00.000ZInside the BlueNoroff Web3 macOS Intrusion Analysis (Feeling Blue(Noroff))TA444 aka BlueNoroff, Sapphire Sleet, COPERNICIUM, STARDUST CHOLLIMA, CageyChameleon
May 14, 2026FAMOUS CHOLLIMA and STARDUST CHOLLIMA targeting of fintechs, exchanges and banks (2026 Financial Services Threat Landscape Report)North America, Europe, and AsiaFAMOUS CHOLLIMA; STARDUST CHOLLIMA
August 03, 2026STARDUST CHOLLIMA malicious npm dependency injected into at least 131 Mastra AI framework packages (June 2026)STARDUST CHOLLIMA