Search OpenSanctions

Advanced

H0lyGh0st

Sanction-linked entity
TypeOrganization[sources]
NameH0lyGh0st[sources]
Other nameDEV-0530[sources]
Legal formnot available[sources]
CountryNorth Korea[sources]
DescriptionNorth Korean cybercrime group.[sources]
Statusnot available[sources]
Last changeLast processedFirst seen

Descriptions

H0lyGh0st is both the name of the cyberthreat actor and the ransomware distributed by it.

DPRK Reports non-official source,

Relationships

Data sources

DPRK Reports5,540

A database of entities and events related to North Korea's sanctions evasion efforts.

United Kingdom · RUSI · non-official source

External databases

The record has been enriched with data from the following external databases:

Graph-based entity tagging63,551

Automatically generated graph-based topic annotations

External dataset · OpenSanctions · non-official source


For experts: raw data explorer