Operation Giant Baby was a 2019 cryptocurrency-focused intrusion campaign against South Korean targets, assessed to involve a state-sponsored actor and to continue the related Baby Coin and Mystery Baby activity. The malware masqueraded as Korean security software, established startup persistence under a security-vendor-themed registry entry, and contacted command-and-control infrastructure to download encrypted components. Its communications and operator-specific code traits remained largely consistent with earlier variants, while the operation sought cryptocurrency-related information for financial gain.