panopticon-DarkHotel

https://www.darkreading.com/attacks-breaches/konni-malware-campaign-targets-north-korean-organizations/d/d-id/1329591

http://www.zdnet.com/article/hackers-are-now-using-the-exploit-behind-wannacry-to-snoop-on-hotel-wi-fi/ towards the end

https://www.wired.com/2014/11/darkhotel-malware/

https://www.securityweek.com/north-korean-hackers-exploit-recently-patched-zero-day

https://www.technadu.com/elite-hackers-target-who-while-the-agency-eyes-into-tracking-people-using-gps-location/96512/

https://www.wired.com/story/north-korea-hacking-zero-days-google/ - South Korea attribution

https://www.securityweek.com/firefox-ie-vulnerabilities-exploited-attacks-china-japan

https://www.cyberscoop.com/dark-hotel-qihoo-360-covid-19/

https://securelist.com/apt-trends-report-q1-2020/96826/

https://www.welivesecurity.com/2020/05/13/ramsay-cyberespionage-toolkit-airgapped-networks/v

https://www.welivesecurity.com/2020/05/13/ramsay-cyberespionage-toolkit-airgapped-networks/

https://blog.bushidotoken.net/2020/06/deep-dive-darkhotel-apt.html

https://www.securityweek.com/purple-fox-exploit-kit-targets-vulnerabilities-linked-darkhotel-group

https://blog.confiant.com/internet-explorer-cve-2019-1367-exploitation-part-2-8143242b5780?gi=ea294ef031ac

https://www.securityweek.com/windows-and-ie-zero-day-vulnerabilities-chained-powerfall-attacks

https://securelist.com/ie-and-windows-zero-day-operation-powerfall/97976/

https://www.crysys.hu/publications/files/tedi/ukatemicrysys_territorialdispute.pdf

https://www.securityweek.com/17-malware-frameworks-target-air-gapped-systems-espionage

https://blog.360totalsecurity.com/en/analysis-cve-2018-8174-vbscript-0day-apt-actor-related-office-targeted-attack/

https://threatpost.com/darkhotel-apt-wynn-macao-hotels/178989/

https://www.securityweek.com/hotels-macau-targeted-attacks-linked-south-koreas-darkhotel-apt