Skip to Content
North Korea icon
North Korea

NICKEL ALLEY

ObjectivesEspionage, Surveillance
AliasesCL-STA-0240 (Palo Alto), Purplebravo Recorded Future, Storm-1877 (Microsoft), Tenacious Pungsan (Data Dog)

Summary

NICKEL ALLEY threat group targets professionals in the tech sector by advertising fake job opportunities. The threat actors deceive prospective candidates through a fake job interview process to ultimately deliver malware. This activity is tracked publicly as the Contagious Interview campaign. NICKEL ALLEY operates on behalf of the North Korean government.
Threat Bottom Section BG

Contact us

Contact us directly whether your organization needs immediate assistance or
you want to discuss your incident readiness, response, and testing needs.