Famous Chollima APT Group: Major Activities, TTPs, and Simulation

Key Takeaways Famous Chollima is a North Korean, financially motivated APT group active since 2018, notably targeting the US and India. Fake recruiters lure developers into coding assessments hosted on GitHub, Bitbucket, or GitLab that hide malicious loaders. Payloads execute through npm lifecycle scripts, VS Code folder-open tasks, Git hooks, and files disguised as fonts or SVGs.