The North Korean advanced persistent threat (APT) actor dubbed ScarCruft is using weaponized Microsoft Compiled HTML Help (CHM) files to download additional malware.
According to multiple reports from AhnLab Security Emergency response Center (ASEC), SEKOIA.IO, and Zscaler, the development is illustrative of the group’s continuous efforts to refine and retool its tactics to sidestep detection.
“
Related Post
- November 22, 2024
APT-K-47 Uses Hajj-Themed Lures to Deliver Advanced Asyncshell
The threat actor known as Mysterious Elephant has been observed using an advanced version of malware called Asynshell. The attack
- November 22, 2024
Russian Hackers Deploy HATVIBE and CHERRYSPY Malware Across
Threat actors with ties to Russia have been linked to a cyber espionage campaign aimed at organizations in Central Asia,
- November 22, 2024
China-Linked TAG-112 Targets Tibetan Media with Cobalt Strike
A China-linked nation-state group called TAG-112 compromised Tibetan media and university websites in a new cyber espionage campaign designed to
- November 22, 2024
The Scale of Geoblocking by Nation
Interesting analysis: We introduce and explore a little-known threat to digital equality and freedomwebsites geoblocking users in response to political