CrowdStrike blog
STARDUST CHOLLIMA operations against financial institutions incl. SWIFT abuse; suspected targeting of Latin America-based organizations since mid-2017 · April 06, 2018
This adversary is typically involved in operations against financial institutions with the intention of generating liquid assets for the DPRK. Previous activity tied to this adversary includes campaigns focused on abusing Society for Worldwide Interbank Financial Telecommunication (SWIFT) systems, as well as intrusions against global banking networks via strategic web compromise operations. ... Recent Falcon Intelligence™ reporting has been published to customers assessing that STARDUST CHOLLIMA is suspected of targeting Latin America-based organizations since mid-2017.