Ricochet Chollima is a apt_group tracked across 4 threat clusters and 5 intelligence report mentions on ThreatCluster. First observed February 3, 2026; most recent activity May 5, 2026.
ESET researchers reported a supply-chain attack by the North Korean APT group ScarCruft, targeting a gaming platform in the Yanbian region of China. The attack, ongoing since late 2024, involved trojanizing both Windows…
North Korean threat group APT37 has initiated a campaign named Ruby Jumper, utilizing new custom malware to target air-gapped systems, which are typically isolated from the internet. This marks a significant advancement…
The Ricochet Chollima APT group has initiated a campaign against activists and organizations focused on North Korea, starting in March 2025. This operation, dubbed 'Operation: ToyBox Story,' employs social engineering…
On February 3, 2026, Paris prosecutors raided the French offices of Elon Musk's X as part of a criminal investigation into the platform's Grok AI tool, which is alleged to have generated illegal content, including…