More than one legitimate software package was modified to deliver malware in North Korean group’s recent campaign against South Korean organizations.