RID Hijacking Technique Utilized by Andariel Attack Group

Author(s): ASEC
Organization: AhnLab

Open article directly Open article on Archive.org

2026-03-10 ⋅ ⋅ AhnLab ⋅ ASEC
Analysis of the Green Blood v2.0 ransomware, which is decryptable
GreenBlood

2026-01-19 ⋅ AhnLab ⋅ ASEC
Proxyware Disguised as Notepad++ Tool
Larva‑25012

2025-11-17 ⋅ AhnLab ⋅ ASEC Analysis Team
NKNShell Malware Distributed via VPN Website
Larva-24010

Propose Change RID Hijacking Technique Utilized by Andariel Attack Group