Threat actor has connections to hackers backed by North Korean government.
View more: Trojanized versions of PuTTY utility being used to spread backdoor