The North Korean advanced persistent threat (APT) actor dubbed ScarCruft is using weaponized Microsoft Compiled HTML Help (CHM) files to download additional malware.
According to multiple reports from AhnLab Security Emergency response Center (ASEC), SEKOIA.IO, and Zscaler, the development is illustrative of the group’s continuous efforts to refine and retool its tactics to sidestep detection.
“
Related Post
- November 14, 2024
Smashing Security podcast #393: Who needs a laptop
Arion Kurtaj, a teenager from the UK, amassed a fortune through audacious cybercrimes. From stealing Grand Theft Auto 6 secrets
- November 13, 2024
Dream Job or Cyber Trap? The Rise of
Dream Job or Cyber Trap? The Rise of Fake Recruiter Scams on LinkedIn How Cybercriminals Are Exploiting Job Seekers and
- November 13, 2024
Hamas-Affiliated WIRTE Employs SameCoin Wiper in Disruptive Attacks
A threat actor affiliated with Hamas has expanded its malicious cyber operations beyond espionage to carry out disruptive attacks that
- November 13, 2024
Free Decryptor Released for BitLocker-Based ShrinkLocker Ransomware Victims
Romanian cybersecurity company Bitdefender has released a free decryptor to help victims recover data encrypted using the ShrinkLocker ransomware. The