Operation HanKook Phantom: North Korean APT37 targeting South Korea
Table of Contents: Introduction Threat Profile Infection Chain Campaign-1 Analysis of Decoy: Technical Analysis Fingerprint of ROKRAT’s Malware Campaign-2 Analysis of Decoy Technical analysis Detailed analysis of Decoded tony31.dat Conclusion Seqrite Protections MITRE Att&ck: IoCs Introduction: Seqrite Lab has uncovered a campaign in which threat actors are leveraging the “국가정보연구회 소식지 (52호)” (National Intelligence Research […]
The post Operation HanKook Phantom: North Korean APT37 targeting South Korea appeared first on Blogs on Information Technology, Network & Cybersecurity | Seqrite.