{"actor":{"id":"apt38","name":"APT38","aliases":["CageyChameleon","Bluenoroff","Sapphire Sleet","BeagleBoyz"],"vendor_names":{"mandiant":"APT38","microsoft":"COPERNICIUM","crowdstrike":"STARDUST CHOLLIMA","mitre":"G0082","proofpoint":"TA444","secureworks":"NICKEL GLADSTONE"},"mitre_gid":"G0082","type":"nation-state","type_verbatim":"nation-state APT","secondary_types":[],"origin":"KP","origins":["KP"],"targets":["BD","BR","BY","CL","CO","CZ","DE","EC","ES","GB","GT","HK","ID","IN","LB","LR","MX","PL","RU","TH","TN","UY","VE","VN","ZA"],"target_regions":[],"sectors":["agr","consulting-professional-services","consumer-goods-electronics","cryptocurrency","def","edu","energy-utilities","fin","gov","hospitality","industrials-engineering","manufacturing-man","mar","pharmaceutical","private-sector-generic","tec","tel","transportation"],"threat_types":["esp","fin"],"mitre_techniques":["T1005","T1027.002","T1033","T1036.003","T1036.006","T1049","T1053.003","T1053.005","T1055","T1057","T1059.001","T1059.003","T1059.005","T1070.004","T1071.001","T1083","T1105","T1106","T1110","T1112","T1115","T1135","T1140","T1189","T1204.001","T1217","T1218.001","T1218.005","T1218.007","T1218.011","T1485","T1486","T1529","T1543.003","T1561.002","T1565.002","T1566.001","T1685","T1686","T1690"],"gir_codes":[],"active_since":2014,"brief":"DPRK financial-heist cluster attributed to the Reconnaissance General Bureau.","attribution_sponsor":null,"attribution_confidence":null,"merged_into":null,"split_from":[],"created_at":"2026-05-20T09:50:16.826298+00:00","updated_at":"2026-07-29T07:05:35.677+00:00","url":"https://aptatlas.net/actors/apt38"},"exports":{"stix":"https://aptatlas.net/api/v1/actors/apt38/stix","navigator":"https://aptatlas.net/api/v1/actors/apt38/navigator"}}