Research reports
1,224 reports from 387 publishers45 added in the past week
1 report, newest added first
Added Tue 20 Oct
Retrohunting APT37: North Korean APT used VBA self decode technique to inject RokRat
Downloaded payload is a variant of a cloud-based RAT known as RokRat which has been used by this group since 2017. This sample compilation date is 29 Oct 2019. This RAT is known to steal data from a victim’s machine and send them to cloud services (Pcloud,…
State-sponsoredMalware
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.