Yanbian Gang has targeted South Korean Android mobile banking customers since 2013 with malicious Android apps purporting to be from major banks, namely Shinhan Savings Bank, Saemaul Geumgo, and more.

Agent Tesla is an extremely popular "malware-as-a-service" RAT used to steal information such as credentials, keystrokes, clipboard data, and other information from its operators' targets.

The current Turkey Dog-related campaigns use lure pages that promise cash payments of thousands of Turkish Lira, purporting to be tied to the Turkish government to steal information or plant malware.

Meyhod itself is simple compared to the Magecart web payment skimmers we've recently analyzed, such as the new variant of the Grelos skimmer and the Ant and Cockroach skimmer.