About Chollima Hunter

Chollima Hunter is a static threat-intelligence tracker for cyber operations attributed to the Democratic People’s Republic of Korea (DPRK): people named in indictments and sanctions, the identities behind remote-work schemes, reported indicators, and hunting guidance. Every claim about a named individual links to a public record. Background is on the home page under DPRK cyber operations.

An independent researcher maintains the site, which is not affiliated with any government or vendor. Data and downloads lists the published files; reuse terms are under Licence.

Sourcing and confidence

No claim about a named individual is published without a public citation, such as an indictment, sanctions designation, court filing, agency press release or named threat-intelligence report. A profile is confirmed only when its subject is named in a charging document, wanted notice, guilty plea, conviction or sentence, or a government sanctions designation. Every record is listed on Sources.

What inclusion does and does not mean

Disclaimer

Presence is not proof of DPRK affiliation or wrongdoing. Operations often use the identity of a real, uninvolved person, so a listed name, photograph, email address or account may belong to someone with no connection.
People named in law-enforcement notices are alleged to have done what the agency says, and are presumed innocent unless proven guilty in court.
Confidence levels reflect the cited source, not this site. Every entry is a lead to verify, not a basis on its own for a decision about a person.

Corrections and removal requests

Anyone who believes an entry is inaccurate or concerns an identity stolen from them can ask for a correction or removal. Send it by the submission email or privately to chollimahunter@gmail.com, with the page address, what is wrong and, if possible, a public record supporting the correction. If you are listed on this site covers the rest.

Privacy and personal data

The site is static files on GitHub Pages. It sets no cookies, runs no analytics and loads no third-party scripts, and GitHub keeps the ordinary server logs described in its privacy statement. Search runs in the browser, and the submission page opens an ordinary email with no form service involved.

Personal data the site publishes

The site publishes names, aliases, photographs, email addresses, telephone numbers and account handles from government records, published research and its own examination of accounts, so that others can recognise a pattern of fraud and intrusion. Values belonging to victims or uninvolved people are held back, and a wrong entry is corrected or withdrawn.