AhnLab summarized its detection coverage for the South Korea-U.S. joint cybersecurity advisory on North Korean ransomware activity. The advisory assessed Maui and H0lyGh0st ransomware as North Korea-linked threats affecting U.S. healthcare, public-health, and other critical-infrastructure organizations, and provided TTPs and indicators for defenders. AhnLab mapped the published IOCs to product detections spanning NukeSped, Andardoor, MauiCrypt, SiennaPurple, web shells, keyloggers, droppers, and related tooling. The report also notes X-PopUp as a legitimate messenger abused in a supply-chain-style malware distribution path and therefore treated as a vulnerable/attack-abused file in AhnLab products.