RokRAT

RokRAT Malware Hides in Fake PDF Files to Spy on Academics

• Malware

RokRAT Malware Hides in Fake PDF Files to Spy on Academics

Do Son July 17, 2026 0

Genians exposed Operation Capsule Vault, an APT37 campaign. The RokRAT malware hides inside a fake PDF to spy on academics and researchers.

The Friend Request from Pyongyang: How APT37 Hijacks Facebook to Deploy RokRAT

• Cybercriminals

The Friend Request from Pyongyang: How APT37 Hijacks Facebook to Deploy RokRAT

Do Son April 15, 2026 0

APT37 pivots to Facebook social engineering, using Wondershare PDFelement "code caves" to deploy RokRAT. Learn how they bypass EDR with memory-only payloads.

Operation HanKook Phantom: APT-37 Targets South Korean Institutions with LNK-Based Espionage Campaign

• Cyber Security

Operation HanKook Phantom: APT-37 Targets South Korean Institutions with LNK-Based Espionage Campaign

Do Son September 2, 2025 0

A new report reveals North Korea's APT-37 is using malicious LNK files in a campaign, "Operation HanKook Phantom," to spy on South Korean government and research.

APT37 Escalates Cyber-Espionage on South Korea: New RoKRAT Backdoor Uses Stealthy LNK Files & Steganography

• Malware

APT37 Escalates Cyber-Espionage on South Korea: New RoKRAT Backdoor Uses Stealthy LNK Files & Steganography

Do Son August 4, 2025 0

APT37, a North Korea-linked group, is using a new RoKRAT backdoor to target South Korea. The malware uses stealthy LNK files and steganography to evade detection.

North Korean APT37’s “ToyBox Story”: Stealthy Attacks Unveiled

• Cyber Security
• Malware

North Korean APT37’s “ToyBox Story”: Stealthy Attacks Unveiled

Do Son May 13, 2025 0

New report details APT37's "ToyBox Story" campaign, using spear phishing and cloud services to deploy RoKRAT malware. Fileless attacks and stealthy tactics revealed.

North Korean APT-C-28 Expands Cyber Espionage Campaign

• Cyber Security

North Korean APT-C-28 Expands Cyber Espionage Campaign

Do Son February 23, 2025 0

Learn how APT-C-28 operates in cyber espionage, targeting industries with advanced techniques and the RokRat Trojan.

South Korean CSOs Under Cyberattack: 3-Year Study

• Cyber Security

South Korean CSOs Under Cyberattack: 3-Year Study

Do Son February 13, 2025 0

Explore the impact of South Korean cyberattack threats on civil society organizations and their defenders in a detailed study.

Operation “Code on Toast”: A Deep Dive into TA-RedAnt’s Exploitation of Zero-Day Flaw (CVE-2024-38178)

• Cyber Security
• Malware
• Vulnerability

Operation “Code on Toast”: A Deep Dive into TA-RedAnt’s Exploitation of Zero-Day Flaw (CVE-2024-38178)

Do Son December 1, 2024 0

Learn about the sophisticated cyber attack dubbed 'Operation Code on Toast' and the North Korean-linked hacking group TA-RedAnt behind it.

ScarCruft Strikes: North Korea’s Cyber Espionage Against Media and Experts Unveiled

• Cyber Security
• Malware

ScarCruft Strikes: North Korea’s Cyber Espionage Against Media and Experts Unveiled

Do Son January 22, 2024 0

SentinelLabs unraveled a campaign orchestrated by ScarCruft threat actor targeting media organizations and experts on North Korean affairs