APT38
APT38 is a North Korea-attributed nation-state APT group with a financial motive, tracked by Brandefense. It targets 14 sectors, including Government and Technology, in 94 countries, including the United States and the United Kingdom. It uses 153 MITRE ATT&CK techniques and exploits 65 known CVEs.
Also known as
- NICKEL GLADSTONE
- BeagleBoyz
- Bluenoroff
- Stardust Chollima
- Sapphire Sleet
- COPERNICIUM
- Group G0082
- TraderTraitor
- Operation “FASTCash”
- Origin
- North Korea
- Techniques
- 153
- Exploited CVEs
- 65
- First seen
- Oct 15, 2024
- Last seen
- Oct 15, 2024
- Record updated
Who They Target.
Sectors · 14
Countries · 94
About APT38.
A North Korean threat group associated with the Lazarus Group, involved in illicit revenue generation schemes, including remote IT worker fraud and cryptocurrency theft.
Last updated Oct 19, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.