Campaign Rifle is a multi-year grouping of intrusions and related malware attributed to Andariel, a North Korean group within the broader Lazarus ecosystem. It focused on South Korean financial institutions, IT companies, large corporations, and defense-sector targets, with objectives spanning information collection and financially motivated attacks. Researchers connected the activity through recurring tradecraft, malware relationships, and victim patterns observed across multiple incidents over time.