FAMOUS CHOLLIMA insider IT worker infiltration of U.S. technology companies (2024 Threat Hunting Report)

Date (as written): 2024-08-20T05:00Z (datePublished)
Year: 2024
Country: U.S.
Actors (as written): FAMOUS CHOLLIMA
Actor pages: FAMOUS CHOLLIMA
Tags (as written): technology; IT workers

Source entries (2)

Hackmageddon cyber attacks timelines (Paolo Passeri)

More than 100 unique companies over the past year, most of which are located in the U.S., Saudi Arabia, France, the Philippines, and Ukraine in the aerospace, defense, retail and technology space · 23/08/2024

Researchers at Crowdstrike expose how North Korea-Nexus adversary FAMOUS CHOLLIMA leverages falsified and stolen identity documents, enabling malicious nation-state attackers to gain employment as remote I.T. personnel, exfiltrate data and perform espionage undetected. [Date Occurred: During 2024; Date Discovered: During 2024]

https://www.hackmageddon.com/2024/11/21/16-31-august-2024-cyber-attacks-timeline/

https://venturebeat.com/security/crowdstrike-2024-report-exposes-north-koreas-covert-workforce-in-u-s-tech-firms/

CrowdStrike press release

FAMOUS CHOLLIMA insider IT worker infiltration of U.S. technology companies (2024 Threat Hunting Report) · 2024-08-20T05:00Z (datePublished)

FAMOUS CHOLLIMA infiltrated over 100 primarily U.S. technology companies. Leveraging falsified or stolen identity documents, malicious insiders gained employment as remote IT personnel to exfiltrate data and carry out malicious activity.

https://www.crowdstrike.com/en-us/press-releases/2024-crowdstrike-threat-hunting-report-highlights-nation-states-exploits/

Suggest a correction on GitHub