🕵️ Famous Chollima

The items that name it 5

• US Arrests Two in Crackdown on North Korean IT Worker Laptop Farms
  articleas threat actors2026-10-14It is written here as Famous Chollima (CrowdStrike's name for the North Korean fake IT worker scheme; operatives abroad use laptop farms and US facilitators).

  CrowdStrike's name for the North Korean fake IT worker scheme; operatives abroad use laptop farms and US facilitators

• Insights into Suspected DPRK Workers
  writeupas classification.key entities2026-08-26
• Socket: PHP and Composer Support Reaches Beta With Reachability Analysis
  articleas threat actors2026-08-22

  Threat actor whose activity was linked to malicious code found in a development version of a legitimate Laravel package; the loader used blockchain infrastructure to retrieve and execute remote code in an apparent developer-targeting campaign

• Socket: PolinRider
  writeupas classification.key entities2026-07-02
• Socket: Famous Chollima Targets PHP Developers via Compromised Packagist Package
  writeupas threat actors2026-06-01

  North Korean APT; malware loader campaign; historically infiltrated companies as fake employees and also creates fake companies/jobs to compromise external developers