Threat Actor
Golden Chollima
- First Reported
- Apr 4, 2026
- Latest Reported
- Apr 5, 2026
Reported Context (2)
- The article identifies Golden Chollima as another tracking name for UNC4736, which Drift attributed to the attack with medium confidence. CrowdStrike described Golden Chollima as targeting cryptocurrency theft. Drift Says $285 Million Theft Followed Six-Month DPRK-Linked Social Engineering Operation
- The appendix associates this tracked cluster with revenue operations targeting fintech and cryptocurrency and lists representative malware samples. Analysis Frames DPRK Malware as Mission-Specific and Replaceable
Malware (12)
Threat Actors (10)
MITRE ATT&CK (8)
Vendors (1)
Products (6)
Industries (7)
Countries (12)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.