ESET researchers have revealed their findings about a previously unknown cyberespionage group that they named Worok. This APT group takes aim at various high-profile organizations that operate in multiple sectors and are located primarily in Asia, but also in the Middle East and Africa. Worok uses both its own toolkit and existing tools to compromise its targets and has in some cases exploited the infamous ProxyShell vulnerabilities to gain initial access and harvest information.

The full analysis is available here: Worok: The big picture