ITG16 is described as a North Korean state-sponsored threat group active since at least 2012. The group has traditionally targeted South Korean diplomatic and national security personnel, human rights groups, media, utilities, and think tanks. Its operations align with North Korean government objectives, including intelligence collection, disruptive activity against adversaries, and illegal fundraising through attacks on financial institutions. The excerpt says ITG16 has also targeted organizations in the United States, Japan, Russia, China, Germany, the United Kingdom, South Africa, and India, especially entities tied to Korean peninsula or regional security issues. Its targeting expanded in the 2010s to financial institutions and cryptocurrency, and in 2021 to organizations and pharmaceutical companies linked to COVID-19 vaccine development.