Operation Sharpshooter uses a new implant to target mainly English-speaking nuclear, defense, energy and financial companies. The campaign s implant has since appeared in 87 organizations worldwide, predominantly (about 50 percent of attacks) in the U.S. and in other English-language companies. Researchers noted several characteristics of the campaign that linked it to the Lazarus Group, but suspected that the clues were planted as false flags to connect the two. They added that this could be a recon effort for a larger campaign down the road.
Source: https://threatpost.com/sharpshooter-global-critical-assets/139843/