There have also been circumstances of the Andariel group having exploited other vulnerabilities in the attack process to distribute malware. The Andariel group is one of the threat groups that are highly active in South Korea, alongside the Kimsuky and Lazarus groups. Recently, the Andariel group has been exploiting vulnerabilities in many programs such as Log4Shell and Innorix Agent to attack targets in various corporate sectors in South Korea. Malware Used in Attacks Backdoors installed through the attacks above include TigerRat, a major malware strain used by the Andariel group, as well as Black RAT and variants of NukeSped.