Palo Alto Networks found similarities between malware used in a recent attack in Europe and that malicious code spread in the attacks against entities in South Korea in 2013. The attack vector was the email with malicious attachments or containing harmful links, the European organization was recently targeted by a spear-phishing attack. The malware had been wrapped into legitimate video player software that was hosted by an industrial control systems company, Palo Alto said. The experts consider insufficient collected data to clearly state why Dark Seoul/Operation Troy would resurface at this time, but they will continue to investigate.”]
Source: http://securityaffairs.co/wordpress/42103/cyber-crime/dark-seoul-new-operation.html