What other aliases and vendor names is Andariel known by?

Andariel is tracked across the cybersecurity industry by multiple aliases, including: G0138, Onyx Sleet, PLUTONIUM, Silent Chollima.

Andariel

Q: What are the primary motivations and sponsors of Andariel?

Andariel operates from North Korea (DPRK) with primary motivation categorized as Military espionage, intellectual property theft, and regime financing through cryptocurrency theft., sponsored or affiliated with Democratic People's Republic of Korea (DPRK) - Reconnaissance General Bureau (RGB).

ACTIVE CAMPAIGN TRACKED ⚠ Critical Threat North Korea (DPRK)

Primary Aliases: Onyx Sleet PLUTONIUM Silent Chollima G0138

Sponsor / State Affiliation Democratic People's Republic of Korea (DPRK) - Reconnaissance General Bureau (RGB)

Primary Motivation Military espionage, intellectual property theft, and regime financing through cryptocurrency theft.

Active Timeline Unknown – Present

Confidence Rating 95% (Grounded)

Targeted Defense Industry Espionage, Semiconductor IP Theft Operations, Cryptocurrency Asset Exfiltration

⚔️ Weaponized CVE Matrix (0)

No specific weaponized CVEs currently mapped in the public baseline.

🎯 Target Sectors & Focus

Defense Industrial Base Aerospace and Aviation Semiconductor Industry Biotechnology Government Agencies Cryptocurrency Exchanges and DeFi Protocols South Korean Defense Contractors