A high-profile North Korean cybercrime group previously believed to be one entity is actually operating as three “distinct, highly specialized” units with separate objectives, according to a U.S. cybersecurity firm.

Labyrinth Chollima, often associated with the Lazarus Group umbrella network, now comprises a core group that shares its name with the original entity and two other subgroups that researchers have dubbed Golden Chollima and Pressure Chollima, CrowdStrike said in a report released Thursday.

Since 2018, Golden Chollima and Pressure Chollima have dedicated themselves to stealing virtual currency, while the newer Labyrinth Chollima has primarily focused