Actor
Kimsuky is using malware that leverages the Dropbox API for command and control, enabling file exfiltration and remote code execution.