Kaspersky Securelist
IT Threat Evolution: Q3 2013 (DPRK-related paragraph 4) · 2013-11-14
The Kimsuky malware contains a dedicated malicious program designed to steal HWP files, which suggests that these documents are one of the main objectives of the group.