ALERT: North Korean hackers targeting South Korea with RokRat Trojan
A North Korean hacking group has been found deploying the RokRat Trojan in a new spear-phishing campaign targeting the South Korean government.
Attributing the attack to APT37 (aka Starcruft, Ricochet Chollima, or Reaper), Malwarebytes said it identified a malicious document last December that, when opened, executes a macro in memory to install the aforementioned remote access tool (RAT).
“The
![[Whitepaper] Automate Your Security with Cynet to Protect from Ransomware](https://www.haktechs.com/wp-content/themes/hueman/assets/front/img/thumb-medium-empty.png)
