Andariel

Andariel is a threat actor that mainly focuses on attacking South Korean companies and institutions. It is thought to either collaborate with or act as a subsidiary of the Lazarus threat group. Andariel employs spear phishing, watering hole attacks, and supply chain attacks to gain initial access. They are also known for exploiting vulnerabilities and deploying malware like Infostealer and TigerRAT.