Operation 1Mission was a long-running cyber-espionage campaign against South Korea that culminated in the disruptive March 20, 2013 attacks on major television broadcasters and banks. The same group was assessed to have operated against the country since 2007, stealing sensitive and sometimes confidential information, and to have planned the March 20 action from early 2012. Distinguishing links across the activity included reused compression passwords, command-and-control codes, RSA key pairs, collection keywords, encryption material, and closely related malware development paths.