Moldy Pisces is the name Palo Alto Networks' Unit 42 uses for a suspected North Korean cyber-espionage group that Unit 42 equates with the actor also known as Reaper. The group's primary targets have historically been South Korean government, military, defense-industrial-base, and media-sector organizations. Beginning in 2017 it expanded targeting beyond South Korea to Japan, Vietnam, Nepal, Kuwait, and other parts of the Middle East, with its range of targeted industries broadening alongside this geographic expansion. Moldy Pisces primarily relies on spear-phishing for malware delivery, but Unit 42 also documents the group compromising strategic websites and using torrent file-sharing platforms to distribute malware to victims.