Famous Chollima is the name used by CrowdStrike to describe North Korea's IT worker operation, which involves placing operatives in companies worldwide to earn salaries that are remitted to North Korean agencies. The group is considered part of the broader Lazarus umbrella. In a recent undercover operation, researchers hired three suspected Famous Chollima operatives who used fraudulent documents and AI-edited images to pass background checks.