Malicious OT Project Files within Reach of Attackers

Google TAG reports a sophisticated social‑engineering campaign attributed to a North Korean APT that delivered malicious Visual Studio project files which compiled into DLL backdoors; the report highlights analogous risks to OT engineering workstation project files that can execute payloads when opened, cites real-world project-file vulnerabilities (including PLCnext), and urges caution and mitigation when sharing or opening project files to protect IT and OT environments.