LABYRINTH CHOLLIMA Evolves into Three Adversaries

About this episode

This episode discusses the evolution of LABYRINTH CHOLLIMA into three distinct adversaries and their specialized goals.

LABYRINTH CHOLLIMA, which is among the most prolific DPRK-nexus adversaries that CrowdStrike tracks, has evolved into three separate threat actors: GOLDEN CHOLLIMA, PRESSURE CHOLLIMA, and LABYRINTH CHOLLIMA.Each adversary has specialized goals and tradecraft. While LABYRINTH CHOLLIMA continues to prioritize espionage and targets specific industries, GOLDEN CHOLLIMA and PRESSURE CHOLLIMA focus on cryptocurrency entities and stand out for the scale and scope of their operations. In this episode, Adam and Cristian explain when it became clear that one adversary had evolved into three and discuss how they differ — and, interestingly, what they still have in common. Despite operating independently, the three adversaries still share tools and infrastructure, a sign of coordination within the DPRK cyber ecosystem. To put this development into context, the hosts take us back to the early days of North Korea's cyber activity and trace the progression of the many nation-state threat actors operating on its behalf. Tune in to learn about a significant update for a prolific nation-state adversary.Learn more about:• The LABYRINTH CHOLLIMA evolution in our new blog post• Fal.Con Gov 2026 •…

People in this episode

Hosts: Adam, Cristian

Topics covered

• cybersecurity
• North Korea
• threat actors
• espionage
• cryptocurrency
• DPRK cyber ecosystem

Keywords

• LABYRINTH CHOLLIMA
• GOLDEN CHOLLIMA
• PRESSURE CHOLLIMA
• DPRK
• cyber threats
• espionage
• cryptocurrency

Mentioned in this episode

Organizations: CrowdStrike, DPRK, LABYRINTH CHOLLIMA, GOLDEN CHOLLIMA, PRESSURE CHOLLIMA

More episodes of Adversary Universe Podcast

• China Targets Technology to Steal AI Capabilities It Can’t Build · June 9, 2026 · 43 min
• Adversaries Follow the Money: The CrowdStrike 2026 Financial Services Threat Landscape Report · May 18, 2026 · 31 min
• The Partnerships Taking on AI Security: Daniel Bernard, CrowdStrike Chief Business Officer · May 7, 2026 · 39 min
• The "Vuln-pocalypse" Looms: Are We Cooked? · April 23, 2026 · 29 min
• Hunting Supply Chain Attacks with Jared Myers, Director, CrowdStrike OverWatch · April 9, 2026 · 26 min
• Breaking Down the New National Cybersecurity Strategy · March 10, 2026 · 48 min