Contagious Interview
MITRE G0133Also known as Famous Chollima, FAMOUS CHOLLIMA, Void Dokkaebi, REF9403, UNC5342, HexagonalRodent, Fake Font, Lazarus
Reports
15
First seen
Oct 1, 2025
Last seen
Aug 11, 2026
Motivation
Espionage, Financial
Targeting
Victim regions
×2×2
United States×2
Victim country, only when stated. Corpus is predominantly English-language reporting, so US/EU coverage is overweighted relative to true victim distribution.
Top ATT&CK techniques
T1566 Phishing ×9T1195 Supply Chain Compromise ×8T1041 Exfiltration Over C2 Channel ×8T1204 User Execution ×6T1555 Credentials from Password Stores ×5T1027 Obfuscated Files or Information ×5T1219 Remote Access Software ×5T1003 OS Credential Dumping ×5T1005 Data from Local System ×4T1486 Data Encrypted for Impact ×4T1547 Boot or Logon Autostart Execution ×4T1021 Remote Services ×4
Indicators
filename ×19cve ×18domain ×15ip_v4 ×10email ×1
Indicator values are available on Pro and via the API.
Associated CVEs
CVE-2025-20333 (exploited)CVE-2025-20352 (exploited)CVE-2025-20362 (exploited)CVE-2025-43300 (exploited)CVE-2025-53690 (exploited)CVE-2025-55177 (exploited)CVE-2025-55182 (exploited)CVE-2025-55241CVE-2025-59528 (exploited)CVE-2025-64155CVE-2025-8088 (exploited)CVE-2026-1281 (exploited)CVE-2026-20045 (exploited)CVE-2026-21509 (exploited)CVE-2026-31431 (exploited)CVE-2026-32201 (exploited)CVE-2026-35616 (exploited)CVE-2026-49494
Recent reports
High