Worok, a new cyber-espionage group, has been using a combination of custom and existing malicious tools to hack governments and high-profile companies in Asia since 2020. Researchers from ESET were the first to spot it, and found that the group also attacked targets in the Middle East and Africa.
Worok has so far been linked to attacks on telecommunications, banking, maritime, and energy systems, as well as military, government, and public-sector organisations.
Although there have been no sightings since February 2022, ESET has linked the group to new attacks on a central Asian energy company and a public-sector institution in Southeast Asia.