Atlas Actors147 Names508 Sectors40 Requirements480

⌘K

Atlas Actors147 Names508 Sectors40 Requirements480

LOADING

UNC5267 (aka Wagemole, Nickel Tapestry) · APT Atlas

Actors/Nation-state / APT/Asia

UNC5267

APTKP · North Korea

AKA Wagemole · Nickel Tapestry

CrowdStrike: FAMOUS CHOLLIMAMicrosoft: Storm-0287

Targets25

Sectors16

Threat types1

GIRs covered0/480

Active since—

QUICK FACTS

TypeNation-state / APT

OriginNorth Korea

First seen—

Type (verbatim)nation-state APT

GIR coverage0/480

TTPs0

Targets25

Sectors16

Last reviewed2026-08-03

Also tracked as

3 vendor names · 2 other aliases

Open Rosetta Stone

CrowdStrike

FAMOUS CHOLLIMA

Mandiant

UNC5267

Microsoft

Storm-0287

UNATTRIBUTED ALIASESWagemoleNickel Tapestry

Victimology

Geographic footprint · 25 countries

origin · North Koreatargeted countries · 25

ASIA · 10

United Arab Emirates · Hong Kong · Indonesia · India · Iran · Kazakhstan · Malaysia · Philippines · Türkiye · Vietnam

AMERICAS · 7

Argentina · Brazil · Canada · Costa Rica · Guatemala · United States · Uruguay

EUROPE · 8

Cyprus · Germany · Estonia · France · United Kingdom · Italy · Netherlands · Ukraine

Sectors targeted

16 of 40

Government100 actors Defense72 actors Aviation22 actors Financial Services74 actors Cryptocurrency21 actors Pharmaceutical27 actors Technology60 actors Telecom72 actors Retail & Hospitality33 actors Education & Research62 actors Manufacturing (man)50 actors Transportation31 actors Logistics22 actors Hospitality33 actors Consulting / Professional Services35 actors Maritime24 actors

Tactics, techniques, procedures

Threat types + MITRE ATT&CK mapping

THREAT TYPES

ESP · Espionage

MITRE ATT&CK · 0 techniques

No TTPs mapped yet.

GIR coverage

0 / 480 requirements satisfied

No GIRs mapped yet for this actor.

Open data

Machine-readable exports of this profile

JSON · RESTActor recordFull profile via the public v1 API STIX 2.1Intrusion-set bundleDeterministic ids · techniques + targeted countries ATT&CK NAVIGATORTechnique layer0 techniques · layer format 4.5

Related actors

By origin and actor type

APT31nation-state

China · 6 targets · since 2013

APT8nation-state

China · 5 targets · since —

APT2nation-state

China · 6 targets · since 2010

APT24nation-state

China · 3 targets · since 2008

APT44nation-state

Russia · 25 targets · since 2009

APT21nation-state

China · 5 targets · since 2010