SectorA06 is a North Korean activity cluster within NSHC Security’s SectorA threat-actor taxonomy. NSHC observed the group operating against macOS users in Austria during September 2024. The campaign distributed Mach-O malware disguised as Discord, a legitimate voice-over-IP application. Once installed, the malicious program replaced the victim’s existing Discord application so that it would launch automatically when the system started. It then created and executed additional malware that provided remote-control functionality over the compromised host. NSHC situates SectorA06 within a broader North Korean actor ecosystem whose long-running objectives include gathering advanced political and diplomatic information related to South Korean government activity while also pursuing globally distributed operations intended to secure financial resources. The observed campaign shows the cluster adapting trusted software impersonation and persistence techniques to macOS environments.