Title: Andariel evolves to target South Korea with ransomware

Published:  Tue, 15 Jun 2021 12:40:11 +0000

Description: In April 2021, we observed a suspicious Word document with a Korean file name and decoy. It revealed a novel infection scheme and an unfamiliar payload. After a deep analysis, we came to a conclusion: the Andariel group was behind these attacks.

Read full article on SECURELIST.COM