Mysterious 'Worok' Group Launches Spy Effort With Obfuscated Code, Private Tools

The threat actor whose techniques and procedures do not match known groups has created custom attack tools, including a program that hides scripts in .PNG images.