Chollima APT Hackers Weaponize LNK Files to Deploy Sophisticated Malware

Gbhackers •Mayura Kathir • February 3, 2026

GBHackers on Security is a top cybersecurity news platform, delivering up-to-date coverage on breaches, emerging threats, malware, vulnerabilities, and global cyber incidents.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Chollima APT Targets Activists with LNK File Malware in Operation: ToyBox Story The Ricochet Chollima APT group has initiated a campaign against activists and organizations focused on North Korea, starting in March 2025. This operation, dubbed 'Operation: ToyBox Story,' employs social engineering tactics and malware delivered via spear-phishing emails that appear legitimate to the recipients. 4 sources 43

Chollima APT Hackers Weaponize LNK Files to Deploy Sophisticated Malware

The full story

Extracted Entities

APT Groups (1)

Attack Types (1)