NSHC's December 2018 intelligence review observed multiple SectorA threat groups, with SectorA05 showing the most intense activity. The report links SectorA operations to political hacking against South Korea and financially motivated targeting of overseas financial institutions, cryptocurrency exchanges, and individual traders. The activity is framed as supporting North Korea's efforts to offset sanctions through cyber operations against financial targets.