![](https://webcf.waybackmachine.org/web/20210616052944im_/https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2018/08/16094115/abstract-digital-lock-800x450.jpg)
Andariel evolves to target South Korea with ransomware
In April 2021, we observed a suspicious Word document with a Korean file name and decoy. It revealed a novel infection scheme and an unfamiliar payload. After a deep analysis, we came to a conclusion: the Andariel group was behind these attacks.