Gangnam Industrial Style is an advanced persistent threat (APT) group specialized in industrial cyber-espionage, primarily active since 2019. The group focuses on targeting critical infrastructure and manufacturing sectors, with a significant portion of their victims located in South Korea, alongside other countries such as Indonesia, Turkey, Germany, Ecuador, and the United Kingdom. While the group's origin country is explicitly listed as unknown by some authoritative sources, internal data suggests a suspected state sponsorship from South Korea, which presents an interesting potential contradiction given their targeting of South Korean entities. Their operations are characterized by the theft of trade secrets and intellectual property, reconnaissance for future attacks, and compromising industrial control networks. The group also demonstrates an interest in targeting supply chains and using ransomware as a diversionary tactic to exfiltrate valuable data.