AhnLab describes recent attacks assessed as linked to Andariel, a Lazarus-affiliated group that has targeted Korean corporations, universities, logistics, ICT, defense, political, shipbuilding, energy, and communications organizations. The 2023 activity includes abuse of vulnerable Innorix Agent file-transfer clients and a trend toward Go-developed malware such as Goat RAT and DurianBeacon, with DurianBeacon also appearing in a Rust version. Earlier Innorix-related cases infected multiple Korean universities with backdoors including a NukeSped/Volgmer-like variant that used the same 0x10-byte key associated with Hidden Cobra Volgmer but applied it to C2 packet encryption. The excerpt frames these malware analyses as evidence for connecting recent attacks to Andariel despite lack of direct reuse of past C2 servers or exact malware strains.