Hackers may opt for HWP documents to target National Defense and Press Sectors because they exploit vulnerabilities in this specific file format and software, which may not be as widely monitored or protected as more common document formats like PDF or Microsoft Word. Cybersecurity analysts at ASEC recently discovered HWP documents with OLE objects, potentially distributed via email attachments or download links, targeting specific sectors like:- National Defense Media The document names relate to the following domains:- National Defense Unification Education Broadcasting Hackers Weaponize HWP Documents The analyzed HWP documents have two main types:- One connecting to an external URL.

Source: GBHackers