APT45

A long-running North Korean cyber-espionage actor active since at least 2009, overlapping with Andariel, Onyx Sleet, and Silent Chollima. It targets government, defense, critical infrastructure, healthcare, and technology organizations and has also conducted financially motivated and ransomware activity.