Andariel APT Using DoraRAT and Nestdoor Malware to Spy on South Korean Businesses

The attackers employed keyloggers, infostealers, and proxy tools alongside backdoors to control and extract data from compromised systems, said researchers at the AhnLab Security Intelligence Center (ASEC).