According to the Seoul Metropolitan Police Agency, the hacker group utilized servers that they had rented from a domestic server rental company to hack into dozens of South Korean organizations, including defense companies. Also, the ransomware campaign acquired ransoms from a number of private sector victim firms.
Earlier this year, the law enforcement agency and the FBI jointly conducted an investigation to determine the scope of Andariel’s hacking operations. This was prompted by reports from certain South Korean corporations regarding security problems that were believed to be the result of “a decline in corporate trust.”
Andariel Hacker Group
In an investigation regarding the origin of Andariel, it was found that it is a subgroup of the Lazarus Group. The group has stolen up to 1.2 terabytes of data from South Korean enterprises and demanded 470 million won ($357,000) in Bitcoin as ransom from three domestic and international organizations.
According to a study conducted by This article has been indexed from CySecurity News – Latest Information Security and Hacking Incidents