NSHC's September 2023 ThreatRecon report says SectorA activity was the most prominent in the collection period, with SectorA02, SectorA04, SectorA05, SectorA06, and SectorA07 observed. The SectorA section describes CHM files disguised with financial themes such as credit cards, securities, and insurance fees, LNK lures using kidnapping news and tax-return themes, and follow-on execution through PowerShell, Visual Basic Script, and batch files. Reported targeting included South Korea, the United States, China, Romania, Poland, Malaysia, the Netherlands, Qatar, and Hong Kong, with education, manufacturing, government, and other politically relevant targets appearing in the activity. NSHC assessed the SectorA operations as continuing efforts to collect information on South Korean political and diplomatic activity while also pursuing financial resources globally.