NSHC observed SectorA01, SectorA02, SectorA05, and SectorA06 activity during February 2022 across South Korea and multiple global regions. SectorA02 used malicious HWP files themed around South Korea's presidential election, while SectorA05 sent spear-phishing emails to public-sector and media targets. SectorA01 impersonated organizations in finance, insurance, and defense-related industries, and SectorA06 used LNK files disguised with income statement, job posting, and salary themes. The report assesses ongoing SectorA activity as focused on collecting high-value political, diplomatic, and government-related intelligence connected to South Korea while also pursuing financially motivated operations worldwide.