[SecList]Andariel evolves to target South Korea with ransomware

[igor51]

Andariel evolves to target South Korea with ransomware

In April 2021, we observed a suspicious Word document with a Korean file name and decoy. It revealed a novel infection scheme and an unfamiliar payload. After a deep analysis, we came to a conclusion: the Andariel group was behind these attacks.
Source: Andariel evolves to target South Korea with ransomware