Kaspersky Securelist
APT trends report Q3 2021 (DPRK-related paragraph 7) · 2021-10-26
Social engineering remains a key method for initiating attacks; but also exploits (CloudComputating, Origami Elephant, Andariel), including exploiting firmware vulnerabilities.