NSHC's November 2021 monthly intelligence notes SectorA01 activity in Vietnam, the United States, Estonia, Ireland, Serbia and Turkey using malware disguised as binary analysis tools commonly used by reverse engineers and malware analysts. SectorA02 activity in South Korea distributed malicious Microsoft Word files with embedded macros that created and executed additional files. SectorA05 activity in South Korea used malicious Word documents containing vulnerabilities and North Korea-related lure content. The report assesses continuing SectorA operations as aimed at collecting high-value government, political and diplomatic information related to South Korea while also pursuing financially motivated operations worldwide.