What other aliases and vendor names is Nickel Alley known by?

Nickel Alley is tracked across the cybersecurity industry by multiple aliases, including: BadClone, Contagious Interview, Coral Sleet, DeceptiveDevelopment, DEV#POPPER, G1052, Gwisin Gang, PurpleBravo.

Nickel Alley

Q: What are the primary motivations and sponsors of Nickel Alley?

Nickel Alley operates from North Korea with primary motivation categorized as Financial gain via cryptocurrency theft and strategic corporate espionage/supply chain compromise., sponsored or affiliated with North Korean Government (DPRK).

ACTIVE CAMPAIGN TRACKED ▲ High Threat North Korea

Primary Aliases: Coral Sleet UNC5342 BadClone Contagious Interview

Sponsor / State Affiliation North Korean Government (DPRK)

Primary Motivation Financial gain via cryptocurrency theft and strategic corporate espionage/supply chain compromise.

Confidence Rating 90% (Grounded)

Contagious Interview, Software Supply Chain Compromise (npm/GitHub)

🎯 Target Sectors & Focus

Software Developers Technology Sector Professionals Financial Services Employees Freelance Workers (Upwork, Fiverr) Open Source Ecosystem (npm, GitHub)