The South Korean government was targeted in a wide-ranging attack by North Korean threat actors. The attacks installed the AppleSeed backdoor, which was used to exfiltrate information.
- South Korean Ministry of Trade, Industry, and Energy; South Korean Ministry of Foreign Affairs; Consulate of South Korea in Hong Kong; and the Embassy of Sri Lanka in Seoul
Suspected state sponsor
- Korea (Democratic People's Republic of)
Type of incident