The group, engaged in cyberspionaggio operations, led an attack on the supply chain of a South Korean VPN developer, replacing the legitimate installer with one containing the Backdoor Slowstepper, used exclusively by Plushdaemon, the researchers of ESET, a global European leader in the cybersecurity market, discovered an attack on the Supply Chain of a VPN provider