> Operation Honeybee was a campaign that targeted humanitarian aid and inter-Korean affairs organizations from at least late 2017 through early 2018. Operation Honeybee initially targeted South Korea, but expanded to include Vietnam, Singapore, Japan, Indonesia, Argentina, and Canada. Security researchers assessed the threat actors were likely Korean speakers based on metadata used in both lure documents and executables, and named the campaign "Honeybee" after the author name discovered in malicious Word documents. > > - <https://attack.mitre.org/campaigns/C0006/>

HOPLIGHT is a backdoor Trojan that has reportedly been used by the North Korean government. - <https://attack.mitre.org/software/S0376/>