|
gptkbp:instanceOf
|
gptkb:hacker
|
|
gptkbp:activeYearsStart
|
2012
|
|
gptkbp:alsoKnownAs
|
gptkb:cathedral
gptkb:APT37
gptkb:Group123
gptkb:ScarCruft
|
|
gptkbp:associatedWith
|
gptkb:North_Korean_government
|
|
gptkbp:countryOfOrigin
|
gptkb:North_Korea
|
|
gptkbp:enemyOf
|
gptkb:cybercrime
malware distribution
information theft
spear phishing
watering hole attacks
|
|
gptkbp:industry
|
gptkb:journalism
gptkb:government
gptkb:chemical_industry
defense
human rights
manufacturing
|
|
gptkbp:majorCity
|
gptkb:Japan
gptkb:Middle_East
gptkb:South_Korea
gptkb:Vietnam
|
|
gptkbp:notableBattle
|
gptkb:2018_Middle_East_cyber_espionage_campaign
attacks on North Korean defectors
2017 South Korean think tank breach
attacks on South Korean government agencies
attacks on journalists covering North Korea
|
|
gptkbp:reportsTo
|
gptkb:CrowdStrike
gptkb:FireEye
gptkb:Kaspersky_Lab
gptkb:Google_Threat_Analysis_Group
ESTsecurity
|
|
gptkbp:usesMalware
|
gptkb:Gold_Dragon
gptkb:bird
gptkb:Rokit
gptkb:BabyShark
gptkb:Bluelight
gptkb:Evil_New_Year
PoorWeb
RokRat
|
|
gptkbp:bfsParent
|
gptkb:Pyongyang_trolleybus_system
|
|
gptkbp:bfsLayer
|
7
|
|
https://www.w3.org/2000/01/rdf-schema#label
|
Chollima-316
|