STARDUST CHOLLIMA
threat actor01
also known as
Other names and identifiers for this entity.
MISP
STARDUST CHOLLIMA · Sapphire Sleet
Open-source reporting has claimed that the Hermes ransomware was developed by the North Korean group STARDUST CHOLLIMA (activities of which have been public reported as part of the “Lazarus Group”), because Hermes was executed on a host during the SWIFT compromise of FEIB in October 2017.
02
related actors
Related entries.
- Lazarus Group· likely
03
references
External citations — patches, advisories, analysis.