NSHC's January 2025 report observed 51 threat group activities from December 21, 2024 to January 20, 2025, with SectorJ most active and SectorA and SectorB next. SectorA cases included fake recruiter approaches on LinkedIn, Telegram, and Discord; attacks on asset management and DLP systems; HWP spear phishing against defense-related targets; and LNK malware disguised as tax collection documentation. NSHC assesses SectorA as continuing intelligence collection on Korean political, diplomatic, and government activity while also pursuing global financial gain.