Interception

ESET noticed attacks against aerospace and military companies in Europe and the Middle East that took place between September and December 2019, which featured this family. They found a number of hints that points towards Lazarus as potential origin.

Family metadata imported from Malpedia (Fraunhofer FKIE).