CrowdStrike blog
DPRK adversaries targeting the technology sector; FAMOUS CHOLLIMA IT worker infiltration (2026 Technology Threat Landscape Report) · June 09, 2026
FAMOUS CHOLLIMA accounted for 47% of all state-sponsored hands-on-keyboard operations against the tech sector, meaning they were most active in manual operations over traditional malware. In their IT worker infiltration campaigns, they sought fraudulent employment at tech companies across North America, Europe, and Asia.