Kaspersky Securelist
IT threat evolution Q2 2023 (DPRK-related paragraph 12) · 2023-08-30
Andariel infects machines by executing a Log4j exploit, which, in turn, downloads further malware from the C2 server. Unfortunately, we were unable to catch the first piece of malware they downloaded, but we did see that exploitation was closely followed by the download of the DTrack backdoor.