Supply chain attack leaves developers in Asia at particular risk
South Korean intelligence says the attack was probably meant to raise money for its poorer northern neighbour
Hackers have created a fake security research blog they use to start conversations with legitimate cybersecurity professionals
The group is specifically interested in gaining intelligence on issues related to the Korean peninsula
The primary aim of the campaign is to fund the North Korean government
The samples include loaders, backdoors, and backdoor builders
One sample appears to be the same piece of malware which the US agencies warned about in May