AhnLab ASEC analyzes recent attack activity attributed to Andariel, a Lazarus-linked group focused on South Korean defense, political, shipbuilding, energy, telecom, education, transport, and ICT targets. The report ties 2023 cases to abuse of vulnerable or misused Innorix Agent installations and to malware families including NukeSped/Volgmer-like variants, Andardoor, 1th Troy Reverse Shell, TigerRat, Black RAT, Goat RAT, AndarLoader, and DurianBeacon. Several tools are Go-based, while DurianBeacon also has a Rust version, showing continued diversification of Andariel backdoor development. The excerpt highlights C2/authentication behavior, registry/config handling, self-deletion scripts, reverse and bind shell variants, and overlap with earlier Lazarus/Hidden Cobra malware traits.