Interesting (and fun) report by @glesnewich on North Korean state-sponsored, money-making threat actor #TA444 (oberlapping with Chollima, APT38, Bluenoroff, etc.): https://www.proofpoint.com/us/blog/threat-insight/ta444-apt-startup-aimed-at-your-funds