DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Additional Features of OtterCookie Malware Used by WaterPlum

Date (as written)
2025-05-08T08:01:07.000Z
Year
2025
Actors (as written)
WaterPlum (Famous Chollima, PurpleBravo)
Actor pages
WaterPlum
Tags (as written)
financial institutions; cryptocurrency operators; FinTech companies worldwide

Source entries (1)

NTT Security Japan

Additional Features of OtterCookie Malware Used by WaterPlum · 2025-05-08T08:01:07.000Z
WaterPlum (also called as Famous Chollima or PurpleBravo) is reportedly a North Korea-linked attack group that targeting financial institutions, cryptocurrency operators and FinTech companies worldwide. They have been using malware called BeaverTail or InvisibleFerret in Contagious Interview campaign since around 2023, they started using new malware since September 2024.
https://jp.security.ntt/insights_resources/tech_blog/en-waterplum-ottercookie/

Suggest a correction on GitHub