Targeting of South Korean companies with ransomware · Jun 2021
North Korean hackers launched ransomware attacks on South Korean businesses. The malware used is an old incarnation of Lazarus Group’s espionage tools with added ransomware functionality.
Andariel evolves to target South Korea with ransomware · 2021-06-15T12:40:11
In April 2021, we observed a suspicious Word document with a Korean file name and decoy. It revealed a novel infection scheme and an unfamiliar payload. After a deep analysis, we came to a conclusion: the Andariel group was behind these attacks.