Threat actor · G0138

Andariel

Silent ChollimaPLUTONIUMOnyx Sleet

UnattributedNo public state or group attribution on record

Andariel is a North Korean state-sponsored threat group that has been active since at least 2009. Andariel has primarily focused its operations--which have included destructive attacks--against South Korean government agencies, military organizations, and a variety of domestic companies; they have also conducted cyber financial operations against ATMs, banks, and cryptocurrency exchanges.

MITRE ATT&CK Techniques

T1005 T1027.003 T1049 T1057 T1105 T1189 T1203 T1204.002 T1566.001 T1588.001 T1590.005 T1592.002

Associated Malware

Rifdoorgh0st RAT

Full MITRE ATT&CK profile

0 recent articles mention this actor

No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.