Long-running North Korea threat group splits into 3 distinct operations

CrowdStrike reports that a long-running North Korea-backed threat cluster, Labyrinth Chollima, has split into two specialized spin-offs — Golden Chollima and Pressure Chollima — with the spin-offs focusing on cryptocurrency theft (including a record $1.46B theft) while Labyrinth Chollima concentrates on espionage against manufacturing, defense, aerospace, logistics and critical infrastructure; the groups share some tools and infrastructure but have developed distinct capabilities to support their differing missions.