MONTHLY THREAT ACTOR GROUP INTELLIGENCE REPORT, OCTOBER 2022 (ENG)
2022-12-22 • NSHC •
NSHC’s October 2022 Threat Actor Group Intelligence Report summarizes activity collected from late September to late October, identifying 28 active threat actor groups with SectorA activity the most prominent. SectorA01 targeted workers in defense, finance, media, medicine, and aviation across multiple countries using compressed ISO images disguised as resumes, containing PE malware and text files, with later DLL payloads protected by Themida. SectorA02 distributed PE malware, while the report also tracks other SectorA clusters across government, communications, and regional targets. The archive is relevant to DPRK monitoring because SectorA groupings map to North Korea-linked activity in NSHC reporting.