Threat Actor
Void Dokkaebi
- First Reported
- Apr 21, 2026
- Latest Reported
- May 22, 2026
Reported Context (2)
- North Korea-aligned intrusion set attributed this campaign with high confidence; the article identifies Famous Chollima as an alternate name. Void Dokkaebi Uses Cython-Compiled InvisibleFerret to Evade Script-Based Detection
- North Korea-aligned intrusion set described as targeting developers and operating the repository-propagation campaign. Void Dokkaebi Uses Fake Job Interviews to Spread Malware Through Developer Repositories
Malware (5)
People (2)
Threat Actors (1)
MITRE ATT&CK (12)
Products (15)
Tools (2)
Industries (3)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.