LABYRINTH CHOLLIMA

LABYRINTH CHOLLIMA, also known as AppleJeus, is a North Korean state-sponsored threat group attributed to the Reconnaissance General Bureau. It is part of the broader Lazarus Group umbrella and has been active since at least 2018. The group primarily targets the cryptocurrency industry, using phishing and malicious cryptocurrency software to gain access, often leading to supply chain attacks like the 3CX incident. It is closely linked to other DPRK-affiliated groups under the same operational umbrella.