H0lyGh0st
| Actor Type | Nation State |
|---|---|
| Attributed to Nation | North Korea |
| Directly Linked Intrusion Sets | Storm-0530 |
H0lyGh0st is a ransomware actor who has been observed deploying ransomware against targets in education, finance, manufacturing, entertainment and healthcare.
According to CISA in the US and researchers at Microsoft, the group is attributed to North Korea / DPRK.
Cyber Threat Graph Context
Explore how this Intrusion Set relates to the wider threat graph