Skip to Content
North Korea icon
North Korea

NICKEL TAPESTRY

ObjectivesFinancial Gain
AliasesCL-STA-0237 (Palo Alto), CL-STA-0241 (Palo Alto), DPRK IT Workers, Famous Chollima (Crowdstrike), Jasper Sleet Microsoft, Purpledelta Recorded Future, Storm-0287 (Microsoft), UNC5267 (Mandiant), Wagemole (Palo Alto)

Summary

NICKEL TAPESTRY encompasses North Korean fraudulent IT worker schemes. The group comprises multiple clusters of activity operated on behalf of North Korean interests. North Korean IT workers have infiltrated Western companies for illicit revenue generation. The fraudulent workers also pose an insider threat risk wherein theft of intellectual property has been observed. U.S. Government advisories have linked this activity to revenue generation for illicit weapons program, including weapons of mass destruction (WMD).

Contact us

Contact us directly whether your organization needs immediate assistance or
you want to discuss your incident readiness, response, and testing needs.