STARDUST CHOLLIMA

MISP
Type:
Unknown
Country:
Unknown
First seen:
Unknown
Details:

Open-source reporting has claimed that the Hermes ransomware was developed by the North Korean group STARDUST CHOLLIMA (activities of which have been public reported as part of the “Lazarus Group”), because Hermes was executed on a host during the SWIFT compromise of FEIB in October 2017.

Aliases (107)
Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet Sapphire Sleet
Metadata
ID: 203
Created: 13/01/2026 17:48
Updated: 08/03/2026 04:00