Microsoft Security Insider (intelligence report)
Ruby Sleet backdoored installer of a South Korean electronic document program (December 2023) · publication date not shown on page (covers activity since June 2023)
Ruby Sleet also likely utilized a backdoored installer of a South Korean electronic document program in December 2023.