ScarCruft Uses RokRAT Malware in Operation HanKook Phantom Targeting South Korean Academics

Cybersecurity researchers have identified a phishing campaign by the North Korea-linked group ScarCruft (APT37) designed to distribute a malware called RokRAT, dubbed Operation HanKook Phantom by Seqrite Labs. The attacks primarily target individuals affiliated with the National Intelligence Research Association, including academic professionals.

Want More Context? 🔎